Extracted

• • Target

    9b05afb86fefbb712955116ad2c3fe99298c5f0fb6e91aa24e78c4a3d1701824.elf

  • Size

    24KB

  • MD5

    57bf9ab795ac69c109288ed15704fd3e

  • SHA1

    d07e1506f63fbf15efbc987f93a16250627515ea

  • SHA256

    9b05afb86fefbb712955116ad2c3fe99298c5f0fb6e91aa24e78c4a3d1701824

  • SHA512

    81f8a4daff6a740d7e4cc6ad7a3c7383099fc3dbca4b1e103aa684fad0043dec06e1693cf03a5922ddf58c5b3f888743f27ea342cabcb6a59f3d068838207311

  • SSDEEP

    384:+RyCvibyNdi9BnCqEZ6ZPvq7JXOROGHwqa4XAN+BB0wDi6VRWGVCz0Nvy2C:y7Gqd2BnUM9rI4EuB5DiQW8C

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1