Extracted

• • Target

    z0r0.i686.elf

  • Size

    32KB

  • MD5

    5a5dfa46d56e5b39bb0e63a8b376dbc4

  • SHA1

    26ac061843855e38d1a7fb8352d5d4c7a90caee1

  • SHA256

    da38e3f623a52bf9faaace39b6dfc6bf4e91a92ad8b13679a9e7869c8b93c362

  • SHA512

    c9f43c9ac317e8accebf1a93ee181268d0576d7463041b02ee99f2745ad97039923dbd33db5432921c92053e505b4bd6f094aade7f8ec71e7cb4c8ba54e1b00b

  • SSDEEP

    768:ar3y3AWzDZU5LS4Ucg37/LSkv495+7DJRPJH2fweo2tW:3HzlUhS4UcHL58RGho2tW

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (152246) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1