Extracted

• • Target

    94544048d7ff5a7fd2dae51017860291

  • Size

    28KB

  • MD5

    94544048d7ff5a7fd2dae51017860291

  • SHA1

    5d8908e26ed378996370ae8489c795521e7ba129

  • SHA256

    909e3357d5f0e46cf8f1b0bf65f92f1039aee688a01fd36ccc5aeb4cdf2fdc07

  • SHA512

    f24eb996c670d0c0c8bd7afd89b923d630c41fcb9b733ba739666e457fbe3bdf3464968d9fb2758facb62d334092261ad6405e8b8c557ffc71dd1b3dd65bec63

  • SSDEEP

    768:UcE1cgRjEZcItPOgit4lxOI1j0FDy3HjD960JgGlzDpbuR1JVc:UcEtg/P2t4lxBjfUsVJuLc

  Score

  10^/10

  mirailzrdbotnetdiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (10075) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1