Extracted

• • Target

    sora.mips.elf

  • Size

    28KB

  • MD5

    fa5457b7546c1b7060c30bde3f8649ca

  • SHA1

    7c75f6463c36eaebc4719f47d8047e5195a85057

  • SHA256

    d3f2f30efffec0f49e28199c60b2819a3e831ae0ba920abd2c5ece5e4bfb3adf

  • SHA512

    f012d61a479015af70447b1c3bd2a48c2977691f9a180f4f5c3340b034c65d69782299cb8459e92e3a18dcadfa3078c8b1c613593170f9fa95dd53ba36050c21

  • SSDEEP

    768:9xVtJYGKnMe6ej26YpmpyfRee5K8vCjsE54JgGlzDpbuR1Jx:9ftJYGK/6eMpmYUmKk/E54VJu/

  Score

  10^/10

  miraisorabotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (49465) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  behavioral1