Extracted

• • Target

    bffc0b923efab28f6fa96aa9db459193da608dd26226124dfeecbe3957602869.elf

  • Size

    45KB

  • MD5

    3dee7a742c3240832d92af16796cbf41

  • SHA1

    be1443888c2bbfd454511ae89d7088a48f704fdc

  • SHA256

    bffc0b923efab28f6fa96aa9db459193da608dd26226124dfeecbe3957602869

  • SHA512

    d145d1f33d609880468730e3290725e259f3d62b87147de764ee621cababe4ab92045a01cb06d4518cc7e1c8af4e38016cda423dab5d3ac570c60af2d835cec1

  • SSDEEP

    768:D/TYCoIxdEk+AxoTZAZHFeq8b35sLN9q3UELbUXfi6nVMQHI4vcGpvb:DECFd+A6YHAxqgLRQZb

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1