Extracted

• • Target

    sora.mips.elf

  • Size

    28KB

  • MD5

    adeb93ef00e2bd4895db6f148fdece67

  • SHA1

    f9528d195826e73bfd5528c025934246c4d708c1

  • SHA256

    d79063e5ed2863b2656c7263c542bf062c998d2db2cbcd4d46f3e48e9a398e85

  • SHA512

    c9077564c3d1d5add56bf033983880cce6815ef5f661c4a934cde6e3cc4a8badcf6cbc0c68cafef106813dee3ab480707ecbadd4795b51ee26653361c89c6b1f

  • SSDEEP

    768:/xMWBhAHuLegF1aF4NscfOl8liV5uJgGlzDpbuR1Jx:/xdBGuLea19acfjliSVJur

  Score

  10^/10

  miraisorabotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (49238) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  behavioral1