Extracted

• • Target

    botnet.arm5.elf

  • Size

    33KB

  • MD5

    11ff4ac7c5e5ccc9690ff7cde902243d

  • SHA1

    ed8098b637b33a8cd959c42c209a2a2380f7eeac

  • SHA256

    38be69c29b666dd50612c0a2223b65d2cb0566b779248df393b536ec4e22f429

  • SHA512

    15a50ab079cd77887a97f016eb40adb5061d66171b07e9295fe115fadfba6edaf14e2712f66b4c5d8884a2dbbcb26cabac91c01a9d09eaa56d60f56506b1850c

  • SSDEEP

    768:qVeJDGugClAp31el6Om8+C60RruXOrQl+QmHTw3zVdIg3Uc:ZDG53QYOKCRRruXO8l+rHs3z8G

  Score

  10^/10

  miraimiraibotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (23830) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion
  behavioral1