Extracted

• • Target

    mips (2).elf

  • Size

    32KB

  • MD5

    06d778c4911581223cf115a23216c7a2

  • SHA1

    779cee4e03e18b9ac36e2c6a53052081e8704854

  • SHA256

    cd3f5dee5fcf1f1a4fa25174e5e8c73957b5967f8e927b26877fd3c84ea56763

  • SHA512

    7a934d279cbac0eb711600829c7a2210e867ed007615b6636e25ec9b607430fe6e29b829e6d33e18791bc145b75a9b5b2365510072e6c7404e93f7f481fe87ba

  • SSDEEP

    768:kjEXij0E8+Ysb41g7y3OHFUWRIAPO7OYYhJgGlzDpbuR1Jcz:AEXiA1WO3OHFUWuOSxYzVJu4

  Score

  10^/10

  miraimiraibotnetevasion

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Changes its process name

  • Deletes Audit logs

    Deletes logs related to the Linux Audit framework.

    evasion

  • Deletes itself

  • Deletes system logs

    Deletes log file which contains global system messages. Adversaries may delete system logs to minimize their footprint.

    evasion

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Deletes log files

    Deletes log files on the system.

  behavioral1