Extracted

• • Target

    49b8f822113bdff71bb72b67f15576a6.elf

  • Size

    43KB

  • MD5

    49b8f822113bdff71bb72b67f15576a6

  • SHA1

    ce2c4745ff1ee1fdc9f6460d2ad9aac74e7d7a6a

  • SHA256

    68e8dd25ab8690fc4daa226427d54c00f5adb5f651dfde03efc9b46b65e681ea

  • SHA512

    db094506b0af86d6055d98b970e1b88dbaaccf43f9e88034b9b789d6bd26a385a1855aa9ab435ddee3549690795077a808f13d730b4b6497b30e4674631d7fe5

  • SSDEEP

    768:Hu64SH4Qj97/SgYSjRmPW3fmHby9hgHIMc3W0voYgd/KtPpjvmaz9sk29q3UELyK:Ozq/dKPW3uHbShgX0gcxrmMzbLB

  Score

  10^/10

  miraiunstablebotnetdiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (103948) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1