Extracted

• • Target

    db0fa4b8db0333367e9bda3ab68b8042.mpsl.elf

  • Size

    37KB

  • MD5

    085a445d18c9486c4eadb52dd1635338

  • SHA1

    2a9046cd5eb1b40f16c39b9b163bb73c88ef51a2

  • SHA256

    1faf599d880f8669f48ead5f9670c2b6e8c1e8e1d322101d92b6dc1fa48ecd02

  • SHA512

    8d29335a11bbdbdf21b104974edef28aae82f7a37c3943fcf26b42aaf761e8761739630c496bbfcbb07757614d49f8689854e6118ca3b80d01e8385a0071b8ab

  • SSDEEP

    768:aPgE2ylEEI/Is86mmG0pfakLuL5NZqy7zKtHPO+0WMY:oj2EJIAmmmG0pCkL45Ncy7wP7

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (194644) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1