Extracted

• • Target

    390f79cfca6cc7660d64c22208b4f2166807e5875da1a15336a9dccff130034d.elf

  • Size

    34KB

  • MD5

    b8f2bf3e7c002718f12751cb02130d2e

  • SHA1

    06919c90eae2564ee9ded3f343e2ec18839e411d

  • SHA256

    390f79cfca6cc7660d64c22208b4f2166807e5875da1a15336a9dccff130034d

  • SHA512

    adfccc7878b168cba5b9f9ce92f246bced0e15db876c28ed2f7e0ec5e344ec6652b643045ca79937de7655da4c71b77db2c778f8b8d11b196bfff156a7d16185

  • SSDEEP

    768:S3rCfTIN99HBlOcTP2V6rWQozQLiJam5SzopuKZiLJmcdiarN1F/tQZWn:+UTC38GHaQo4iJam5SzopuKZiLJPJrXn

  Score

  10^/10

  miraibotnetbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (112846) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  behavioral1