Extracted

• • Target

    128a241d940917090b3fbd9a56341ad8

  • Size

    31KB

  • MD5

    128a241d940917090b3fbd9a56341ad8

  • SHA1

    265370703be261330182f5bc428167fea71644c7

  • SHA256

    4ac48aae6b65b6b6d8bad9d99e10b254d0848ef09eb0fa3807fc6a46a727d328

  • SHA512

    98b873e8f2c17917e591d524054ded72b052110523585ffb3bbd9dc72c730d3209acece1aaa6147c18a22014bd94ff3f153e81bad11a1aefb4cc79347be9b30e

  • SSDEEP

    768:mXYSyYdklmrEdQ5PFeMzKUZygW3PbJtlLAhRmxaSoJgGlzDpbuR1JB:+KmrEmPFeMzKzN3lJoVJun

  Score

  10^/10

  miraimiraibotnetdiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (19474) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1