Extracted

• • Target

    db0fa4b8db0333367e9bda3ab68b8042.arm7.elf

  • Size

    58KB

  • MD5

    faf7b56664a9a3d1ef6baee8108b06e5

  • SHA1

    8802e3ba7f3f471e7ee022161176e911f243e244

  • SHA256

    a203068d6b023ee36cc2503e15945cfea976c9fb68aa37e07574d376a872ff3a

  • SHA512

    1fee4c3f33ccd26ae8f249f4b0e972116e808ceffb8ab9679c743bbeb6f9ba23a58cc9b05d947285e03b3b145f2e703488987fdb412ccb79dd1008d0834895cf

  • SSDEEP

    1536:62w1MM/IwPkVkqzE+efp/OuwFrJ5t72LF9IM3/P9U:62mnFP+WF0pycO3S

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (199461) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1