Extracted

• • Target

    SecuriteInfo.com.Linux.Siggen.9999.18116.15129.elf

  • Size

    52KB

  • MD5

    a5dd3e11db32a008f239cc4a155766ba

  • SHA1

    927fff7c0d8319409dae963b1728aab4b244b5d9

  • SHA256

    84dc574096c6dfc1b4b436e590f31e4c121f7b4b10b26e6124a546ff4113fc42

  • SHA512

    9a1ac745231feae8fbfc8c6374d2c2610f989785ec1051e6b8096f3b09e470335f0444b6d0fb7d365d377362bf920fd706eb46f4b5032049e8bc7ab48e0a4452

  • SSDEEP

    1536:9wdFUM6SC2ToQgKhzRYG9C+lXWL4DBYQcpUBWH:9KUzSCFQ1zGG9C+lGLk65GBWH

  Score

  10^/10

  miraisorabotnetdiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (1037576) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Changes its process name

  behavioral1