Extracted

• • Target

    8a654b22b79b11d5c261d555cf5b427bde98961ea7a76e18b92caa95088815a3.elf

  • Size

    34KB

  • MD5

    95a6587edbe4e5d4bc2145896a70cc31

  • SHA1

    6a2a68a5e8a7dd3dd80f1a74be3f86e5b5de8acc

  • SHA256

    8a654b22b79b11d5c261d555cf5b427bde98961ea7a76e18b92caa95088815a3

  • SHA512

    be71b33440e552f73ebe791486879ea49e912b5678e2f9034bb77f7d9c63838e5bb2c777444fddaa4016b06dac06cdc9de838c2ccba7b958ff8b9ed0c1f82932

  • SSDEEP

    768:Q1h4GigL/h/0lmOyt/uPyiLMV3b9xNH/pET0Qt1ys3U6o:GZ8mOKVr9rHKP5o

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (196938) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1