Extracted

• • Target

    db0fa4b8db0333367e9bda3ab68b8042.mips.elf

  • Size

    35KB

  • MD5

    3336d232be56140056091359f116049a

  • SHA1

    edf3b844ddfadbc3422b763d10d352d2bf4c3369

  • SHA256

    c76db62ca0458be388c16aa534442b6adb503f61644e64439f502fede371de76

  • SHA512

    d0c01889b486d2440c97ecafcf2bf14baf3c0728930213793c3a143cc9f961700399177deec70df37b7751e06dbd6eac3df13b32dd1f607f3e72f45b03c9d3f3

  • SSDEEP

    768:2EUl3dSMnbPoGbT55n7OZ7Hj2Y4GAU04FIPbVAeJgGlzDpUYsQ:2VhjbPoyTYDB4clspVqYP

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (200376) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1