Extracted

• • Target

    wind.x86.elf

  • Size

    25KB

  • MD5

    e9f61e6b6b737e9d1fa9534bd7ff257f

  • SHA1

    13499da8bb6a2aab5c43d82005a71e9788dce254

  • SHA256

    76b5c4f597163e7da019b88043796c47d8e939e7ab585c16ca477f7e65f31334

  • SHA512

    cba8567bfb3bece2ece45b1b424106d8124e0a4a8587221500eab86d61d5c2203f5395877e138fea9b9245802a7a2c94f1fb0e6f1deec1e8c9be499ca89bb2e4

  • SSDEEP

    768:oyIWAEAOn2fvESB7DXZhKJ526I4OgW6rywkpwn:o0pnUsSB7DXyOgWrRpC

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1