Extracted

• • Target
    ec089e002f2339db285e95060d5a84d827da635a631b68951999ad56393903fa.elf
  • Size 85KB
  • SHA256 ec089e002f2339db285e95060d5a84d827da635a631b68951999ad56393903fa
  • MD5 1981f2cfcd1d1de5bdd99d039380d106
  • SHA1 20f6431b9b900b1de38e8854b3694da4ab4cb6ae
  • SHA512 b594c175864c25cd1e1dc9c6f19c849cef8567061eb38bd6ee6937a9eda29ce2ed4fe7c7b835bf7402ef4c58cbc302f6905177c95e0d92fa81b79c3f5b49e4aa
  • SSDEEP 1536:i+tfuSpj5F5mmIonZIpfeMNAYOCAIWjzIWlKC03MamTy/w2rRu/BVredYqt:i+XZ5F5mtonZIpmMYIWFsC03MRTAw2r/
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  miraibotnetexecutionpersistenceprivilege_escalatiorootkit

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Loads a kernel module

    Loads a Linux kernel module, potentially to achieve persistence

    rootkit

  • Creates/modifies Cron job

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    executionpersistenceprivilege_escalatio
  behavioral1