Extracted

• • Target

    3ae451c82cef941a17d4c07f469999fe77f92d2fdd4c08436109a99c024ac3d5.elf

  • Size

    31KB

  • MD5

    703fd690d45c0ba5723d873fa8a6fdc2

  • SHA1

    577674e08161bd722cdec20af2dd28c7df283b8e

  • SHA256

    3ae451c82cef941a17d4c07f469999fe77f92d2fdd4c08436109a99c024ac3d5

  • SHA512

    805da427db1ca8b779a89f4958f66a2a2744dfb0d8251cc9568aa6cd0f203e781bba8810c77c7422831a2f29ed2adadfed32dc011b22e569dbe8de1a128fb560

  • SSDEEP

    768:xnAaU1RdiiHRi0dE5OkZ8JU+h5LtNG1ir3Up:5AQiEse8ii5LtE1ig

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (151750) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1