Extracted

• • Target

    5380e594a625c7d1e26f29a2bed5014705294e244d213a02dc0b61183b9c7a8f.elf

  • Size

    20KB

  • MD5

    6966d935987bf8c8909342956b9ae498

  • SHA1

    d6e8a87206817a4049d6ab5bad8a854573d32c0b

  • SHA256

    5380e594a625c7d1e26f29a2bed5014705294e244d213a02dc0b61183b9c7a8f

  • SHA512

    c115e6d6b0485c4490640441f9b527844a487f0a465bf596bd871c6afe41542c5bc873f550aec18fd01ee72593f4a2583bb40b9e5fea392d9bb1930914e1cbae

  • SSDEEP

    384:M0DLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oT3:x98o08kxofBE+ZkXaITbp2F2TWul0c5b

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1