Extracted

• • Target

    db0fa4b8db0333367e9bda3ab68b8042.mpsl.elf

  • Size

    37KB

  • MD5

    d62ae73c752c14975ee16b2586f40f1b

  • SHA1

    b107881fc080964eefcbe607ea08324e4951f70f

  • SHA256

    1dec9f0f93e45f756365de0270ce11668c6b04c27ba31bc1898eab8296fca54d

  • SHA512

    4c3c0ea958590a70158d00f255b6ffeb573784e21d0d7222ac99497e187111a7786ef4f8d803aaf785abd1673c89c0b9977c9bdd47acb0f62b556f5a51fdeba3

  • SSDEEP

    768:aPgE2ylEEI/Is86mmG0pfakLuL5NZqy7zK6wgs+0WM0:oj2EJIAmmmG0pCkL45Ncy7/wc

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (112621) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1