Extracted

• • Target

    db0fa4b8db0333367e9bda3ab68b8042.arm7.elf

  • Size

    58KB

  • MD5

    50efda01ca3ecca5b47872216f029e40

  • SHA1

    c1d94dfb10f5fb7c4b3331283ad3e1552c7959f3

  • SHA256

    0751f7565fc30f43e9c8a482aaacb7d8ebce13f8c932800338d923e1b579d89e

  • SHA512

    fad99fc056412d7b58a2c616bf10210b976cc74bd4c123e29b7d478b1ea963eb06a74efbf1571c33ecbf932a3cb8c749995683a6b7b160d046b97e96f9cfcf46

  • SSDEEP

    1536:62w1MM/IwPkVkqzE+efp/OuwFrJ5t792bLF9IM3/P95:62mnFP+WF0p5AcO3H

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (210099) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1