Extracted

• • Target

    2156dc83b9b4882b3bceb4a6a37e88f2b04441795730856c00716c3c057714cf.elf

  • Size

    20KB

  • MD5

    e496f61986a63fbc38f42754b4877a16

  • SHA1

    0950cc4d4c0583040210177db98411e5b06f5004

  • SHA256

    2156dc83b9b4882b3bceb4a6a37e88f2b04441795730856c00716c3c057714cf

  • SHA512

    a6b28e1b323242d5b17c48639a8fa8642f43892c3a292d3fff89bf02b46b8ca0d4e756074d8b9a238a1caea7adba467d26cc0a0bd184f20321dbe54114dd3a5a

  • SSDEEP

    384:M0DLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTA:x98o08kxofBE+ZkXaITbp2F2TWul0c5E

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1