Extracted

• • Target

    bf5af10c4ceba35363d91795b7231b92339224510923a0e01aa76b6649dfff04.elf

  • Size

    113KB

  • MD5

    c62947c17462ca4aabde6ac69b29bb50

  • SHA1

    638f71c65bc039f53918bcec37506ec3cfcc6461

  • SHA256

    bf5af10c4ceba35363d91795b7231b92339224510923a0e01aa76b6649dfff04

  • SHA512

    209b802cab1f3669e1c17b7e2aed4c332f79ada57352e9ba6504dfe5ff835ed40dd8fd4f27922eec6d1428b0e0eea2d459012593984b9973ed95034b9eab27a4

  • SSDEEP

    3072:6GAb5JluZ36bN4uNY+hsf18v1gXvY/tmxn1J1NQPSTPjU6Fzqo:xQJluZ36J4WY+hsf1ggfaW1LQYLtv

  Score

  10^/10

  miraibotnetdiscoverypersistence

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (46403) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates/modifies Cron job

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    persistence

  • Writes file to system bin folder

  behavioral1