Extracted

• • Target

    1bebac58f8cd6b1a373373e755102e5d1636d1f22f93854d3a2c8f4feeb48883.elf

  • Size

    61KB

  • MD5

    78ef06d30c3417fd84817290557cf5ed

  • SHA1

    f95dfa04047c69ecd9bff2594dd1cf4a35f01df5

  • SHA256

    1bebac58f8cd6b1a373373e755102e5d1636d1f22f93854d3a2c8f4feeb48883

  • SHA512

    fe8dbbe1aa4e27efce28a60591f8053e1e19741183e1d52c803ef8eb0bfde3f699d26fec20eed12a4ff0da7fe68f0a977389f226e17e50a604030061b0f55828

  • SSDEEP

    1536:+z3fnL7XnbtT9wA8W+ZgllYtRp13D0SOj5fiA:A/vhTqk5llMyliA

  Score

  10^/10

  miraimiraibotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (23047) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion
  behavioral1