Extracted

• • Target

    f395ace9d7dcc6b64e4161b0be7408f0be492c61b817bfbba73de4330bf312d7.elf

  • Size

    37KB

  • MD5

    8f7e78c211d41399085cab1f78b01c32

  • SHA1

    c28ee1e8dc1ca6f1bdfeb29551a15a62daf895dd

  • SHA256

    f395ace9d7dcc6b64e4161b0be7408f0be492c61b817bfbba73de4330bf312d7

  • SHA512

    48aaa98b5a4f2601852b29ca3b3915757536cd1be309dfcd6791fa20d4e53bce57b280efd1cc66e1f60faaf51ce8511a931acdff4bc9e4d1f1aa10b7d85fecd2

  • SSDEEP

    768:7ghW5vB2zC1sXOom1bUBfeDfOZOPT16ciTpKPYbwPHsWMVO:8o58CU7Koy165ogbMH/

  Score

  10^/10

  miraimiraibotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (23188) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion
  behavioral1