Extracted

• • Target

    db0fa4b8db0333367e9bda3ab68b8042.x86.elf

  • Size

    32KB

  • MD5

    e0297bd09d0dcc039663952aff9a966c

  • SHA1

    81a258daba0def66043d5691d4526840d35168ae

  • SHA256

    a8587ad24055f3effe56955b108e86e9dc55c37ad385286aedbc625a5b759d54

  • SHA512

    8723e73534ee2f38912c30a2944e021bafe695f1538c5fdf157c72cfa4559ca9aed678a6418c33a9a59e03fd4a028493754b55bf2dc3d80d143b9a64695fc9b7

  • SSDEEP

    768:096q53EJyGbS6bJPGNdOc7MI6k7J1dqnbcuyD7UiyqJ:0BmJFbS6NF6MJ+6nouy8ZqJ

  Score

  10^/10

  miraiunstablebotnetdiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (180863) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Changes its process name

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Writes file to system bin folder

  behavioral1