Extracted

• • Target

    botnet.x86.elf

  • Size

    36KB

  • MD5

    f2f60d4a6a730922e0ba0f726bda9b1c

  • SHA1

    52d1c36c09ddbc562804583c7cc56d1d75c564b2

  • SHA256

    c04b0a7147f1f0d71c6cb9dc127fa3b1e3ff3389d5b9ce06d399389f87637916

  • SHA512

    b49b54b917b6eb9a144b3b182e2f213bbf20b5aef44a60119a85496f7aa19dce8ad20d4f63b6c1fc61ff27e35b2ec329906650c327e53f7d8c733a991ede643e

  • SSDEEP

    768:3dXCmneD1ZkdpWWYwk8rvNBS+05BigNqr2KY/bSv9sPCi:NS22K9YervN0+0aOmDfFuCi

  Score

  10^/10

  miraimiraibotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (23994) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion
  behavioral1