Extracted

• • Target

    z0r0.arm7.elf

  • Size

    54KB

  • MD5

    c2905cce39023437182165f4c484b703

  • SHA1

    6a128613eca7ce76dc3a7e7bbe937575b54387b0

  • SHA256

    39081308223a95724d945655162b54baca50acaaeff5110b45e4ec521ac5e603

  • SHA512

    337fb0f5754be7e79639654f33d30be7402d289e2992712f00cece8f40ff5cf61a2f65dfeadaae809b056c980ec8d78f186d88fef01b6aeb4a687d3671c44d18

  • SSDEEP

    768:vrI61Jcg2i2c5H6/fATljJfMHSNr8YL6mW+1N+q3UIIvCdyGQqf8QKf7:vd1igmcE/oTlleSNvTRIvCgGQqfm7

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (147854) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1