Extracted

• • Target

    15005678e664c5976c42a3693c4925f3

  • Size

    30KB

  • MD5

    15005678e664c5976c42a3693c4925f3

  • SHA1

    54b0cb6031f07ac9874cbad0b3562d79934e7ce7

  • SHA256

    a86f11569deeeb2c67eaffa60475b6540d8eba0c6023764e1552375f6ab11a54

  • SHA512

    545bd211bdeccff922ade066f2702e6d37ac2c1616dfd0642e4dc0a18c50280820d2a2f8587e60b15ccfc6b71deb6652e558ed1dca92b4b987a1953681c172c2

  • SSDEEP

    768:RwMWMDcaItGROgqykcBRBDt4LeKz6ohZBWI:RwMH/lkcJDt4Ldmo7

  Score

  10^/10

  miraiunstablebotnetdiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (79738) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Changes its process name

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Writes file to system bin folder

  behavioral1