Extracted

• • Target
    beaeb0bc06826cd38c5ca522365dad1a9463defdd9767aa8c04edf464ae38fd0.elf
  • Size 52KB
  • SHA256 beaeb0bc06826cd38c5ca522365dad1a9463defdd9767aa8c04edf464ae38fd0
  • MD5 cf8e2ae50926d7fdeb626ba034ddfd5a
  • SHA1 ebcbacadb31db36fc8cc7a69c5b244ab35fe0437
  • SHA512 2c96d21c68fe011a7fae761ad692756f36d0630ceb21e9621ca0f43fe0a0e342cfade03b34a76dbe02ef5fc9fb5a1bcd1132d04ea92d8e1c495f6c25d017de7d
  • SSDEEP 1536:f/fQx7LSrHzswsw5bxrLWdR5tgZ6c9otO:P27Oi+xrLsrtgZ6OcO
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  mirailzrdbotnetdiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (20716) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  behavioral1