Extracted

• • Target

    x86.elf

  • Size

    28KB

  • MD5

    54d07ade0004f03aaca028523d8f3eb6

  • SHA1

    73606fc68439ea7ceb148f94d61dbe0235da8355

  • SHA256

    d1270e8be4de4713834930df984a515448ca8dd0acc7b0e03e5aa7fc4428882b

  • SHA512

    43ce9c67151734e6e907a4bf30c06e41b52d524c388273380506b604ce3fed2779ef057b282737b1e05c11055611a4bd0559567253fb1b0f3309114e20eadf4b

  • SSDEEP

    384:MHAA8X5tiap3aMg31SOTkCN9/zER2BUxG6g0P97/KNTu+AKfekvUyvICkzvDeSwK:X0asSl4hzzBb6PP97CNNeksyv39t9E

  Score

  10^/10

  miraibotnetbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (111821) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  behavioral1