Extracted

• • Target

    4835ef813a9ef7190525293c8f32d9c2fe3c088574ccd6c06ac2738d60ff43f2.elf

  • Size

    61KB

  • MD5

    ffef5c30d386027b9550b1aa067f7e36

  • SHA1

    a79592292918cfebf554e70a7c3795389dc24a2d

  • SHA256

    4835ef813a9ef7190525293c8f32d9c2fe3c088574ccd6c06ac2738d60ff43f2

  • SHA512

    ee0771af44083d0acba51a1812e8b2476836045e61e30e37aa69099c47188feaa6828f1186bb48040db829ebebfd24fe0c2ba94486ec412b880081e4ae8c6a9e

  • SSDEEP

    768:3nmRXdVfdG9KPFTnvOE3M/qiYk9mkLtd64de5GrN44KUyasZSDq3UI7wNG6XqAK7:3n4VdG9KJnvu/qiv16bffNhy0A13s/g4

  Score

  10^/10

  miraimiraibotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (24006) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion
  behavioral1