Extracted

• • Target

    h0r0zx00x.mips.elf

  • Size

    32KB

  • MD5

    57d0f250ce38e7fe3574e018c2a38379

  • SHA1

    3bd438df8821889fa602da0a88e2519eba2a8a5d

  • SHA256

    adc5a693e16ba5bd199b96e08cc21a0e29015b969811aa79abb9860546f06f8e

  • SHA512

    18fb1e0faf3e435b570e9b988fa801fe42e13c5eef8744ac4729b3277b10c15f16615bffda3670b479ce057c0eb92ca82255c4dfaf26f9a96a689a97290d3e16

  • SSDEEP

    768:ejZwebsQRp1kwtPNTwbCfxHuBMAP7EXNmhZVJgGlzDpUYsX:ewYsWXkS5w+fxHQMAP4X2ZPVqYQ

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (123617) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1