Extracted

• • Target

    ub8ehJSePAfc9FYqZIT6.arm7.elf

  • Size

    60KB

  • MD5

    3850a6ed3b8397a787989e782dd8f96d

  • SHA1

    1b67ffbaecdc01a7a7305cbc19139bf230496506

  • SHA256

    fbf8b8524b49dbcb4369bc7f84cb321a01fbf956c3c4ea7475e7fcb813ba13cf

  • SHA512

    545b12f6ebfa4fb4b27658c497cf7e3f837935aec0de44b7e0466163994868c5e1df758bcf6e8c937d79b28d11795d6eec536a39c2a7c01c13a2f7efb4e39c8d

  • SSDEEP

    1536:Y7XduYshWhq/HIEy6Og3Nwz9hAyxP4fzLSM5Tfv83KJGTb6R4T:qdpssMPR9w4yxP4fzLXTX83K0Tb6Rg

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1