Extracted

• • Target

    3d19de117388d50e5685d203683c2045881a92646c69ee6d4b99a71bf65dafa7.elf

  • Size

    58KB

  • MD5

    58c5fe2b0d7da7ab08d0d457a89520fd

  • SHA1

    8ded684340a0e6de4d7fe7db4a89f7d29a3ca839

  • SHA256

    3d19de117388d50e5685d203683c2045881a92646c69ee6d4b99a71bf65dafa7

  • SHA512

    4e6c5d4dc021d63c0f9f821a17cd41c53903132fd167bb7a10d9f363714e42862164eb6feb5684d9179d889793344ed157948e9bd9a604523d346b462114c6e5

  • SSDEEP

    1536:/tcML1rgs1BeGYeEzCt9jHaL9NakbUl8No:FxrZ4GYeQq9raL9IyUl8a

  Score

  10^/10

  miraimiraibotnetdiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (61925) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Changes its process name

  • Deletes itself

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  behavioral1