Extracted

• • Target

    4c395d3dc437c2555afeef40fb80444c5a064e5783545ad057e0957412c1ce57.elf

  • Size

    33KB

  • MD5

    65b6addc2390a77ab736810c77e77a7f

  • SHA1

    46838f4bb68bdb345f8da80a56f792483912ee10

  • SHA256

    4c395d3dc437c2555afeef40fb80444c5a064e5783545ad057e0957412c1ce57

  • SHA512

    5cf51b645aec3458fa4c223fc59011faab477ce438ee72871b07be45f5470ebb61e165dbf356d9c63ef162bea8cc2b15c73abd5f9e3d71a7520f618b0cf09886

  • SSDEEP

    384:d6w1SWoC/LTxdh0xBbasNu7HHmg4oHIdgQ2BaCW3OXr3rhMwtZanrrsyT3kI7A/q:dB0WtXxX4FW7HSgfwOb5tZI/xjLU/LWb

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (20342) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  behavioral1