Extracted

• • Target

    8f4123376f6e62c0fb0c2873c3b296938b4e4a9e71bf9ca79354a379c97c6f43.elf

  • Size

    36KB

  • MD5

    184047f63f7a90e80013490538c9416c

  • SHA1

    623474bf1cb4e40d6b4b18d8c1e9e4bc2014ffed

  • SHA256

    8f4123376f6e62c0fb0c2873c3b296938b4e4a9e71bf9ca79354a379c97c6f43

  • SHA512

    f522f9d9d455ffba51403d0bbe560a08af6f54afe7879fba58128d87712f9e2cab5aac55d3b646833ef3b1dc77bb788bfce9149e362bc70468f1afd22721f609

  • SSDEEP

    768:N2+9wmSvVydtj6sq+BY+uBEyiHBFiQCeN4I/DbjkBSYr/scRrQHc1Nfv9sPqa:N2ewmSvVGZBrBY+u/mLXlOIb3iSYbRAh

  Score

  10^/10

  miraibotnetbotnetdiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (76891) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Changes its process name

  • Deletes itself

  behavioral1