Extracted

• • Target

    botnet.mpsl.elf

  • Size

    37KB

  • MD5

    9f283a66e6aa73b192d236fb6c16cf51

  • SHA1

    4079022688540bd661f8d3246be685cf8f652c3b

  • SHA256

    c9c219a8c84a6f4a4d2c6b2daab81dfec2d1de4dfe12649c25b3b2be73589f1e

  • SHA512

    fee1659c1bd5befdaeb3c34a241d6f1cdcfefeaee9f3e06d77fae24ebbb23f79cf2b9d9d6c9ced7b32c95058c5142498ad896bf75701e46207bad00de18ac157

  • SSDEEP

    768:TghW5vB2zC1sX2v5WkybCQCBcqL4szKtRS6RaWbTJo+YEHhWMVK:Uo58CTvrsCGYKtRSGaWbloWHK

  Score

  10^/10

  miraimiraibotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (23197) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion
  behavioral1