Extracted

• • Target

    42c1afa196dd457a3c9ec69e786c029b7b98f0b5be4041cfbd8b2910352435eb.elf

  • Size

    30KB

  • MD5

    0842c61836702a0076322f2b7d544573

  • SHA1

    f5abaa6bd4119636147e1bbb74407f097d8509f5

  • SHA256

    42c1afa196dd457a3c9ec69e786c029b7b98f0b5be4041cfbd8b2910352435eb

  • SHA512

    493bb8235286e258af22211a2c29a051780f2397c9bf76fff5b5bd6f7a9e9906a8e80d93bb8a7aeea7e0b3bca65e8886796d21a671e8ecb10f7ef8570feb52a5

  • SSDEEP

    384:MpS56NYte96zrpEQQJM73j1AMjtA0/cp/M86ShEbrB0by26zqyTAuErDNu+v1RB:9JlEQAMn1AQ4y8vhkl0mJqYAN/NRB

  Score

  10^/10

  miraimiraibotnet

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Changes its process name

  • Deletes itself

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1