Extracted

• • Target

    7a36bd7a9d19b6d48807264712141dd0543ffebd9db923a76799ffd687f352c9.elf

  • Size

    35KB

  • MD5

    fd5d7deebbb62aee931a1701a1042450

  • SHA1

    4adc94ce9de13647815a16d6514b73e109c80785

  • SHA256

    7a36bd7a9d19b6d48807264712141dd0543ffebd9db923a76799ffd687f352c9

  • SHA512

    cb7beeb8d88ad48ac447b69b215738cdf1d706cb88c4945d0a0837c07dfe41a74107f9c4d7fccc5c7e5719ee9a912452ba3c53c360252bd46978f5d27c1b6df4

  • SSDEEP

    768:O+DoIF4MqYZARntl54BnHU5HX/G9a2Q5IBSkbJgGlzDpUYsy:ORIpU56YXuI2bBRVqY9

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (213948) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1