Extracted

• • Target

    wind.x86.elf

  • Size

    25KB

  • MD5

    d1e9fb00e183751e20c925fb59987bad

  • SHA1

    f4ace9a4af08c71ad4484b137abb1e119b910c51

  • SHA256

    519516cd21153492a011b48782f1e272659dcd78c4bdf98f492467a5fbd3810a

  • SHA512

    5a3fb587b124757512f5fc50e0fa14ab06da32c4af6bc67a26acd467e2f9f20482c1447242b0ecf2f7d5254608585720721890461d5591eaa789d549f9e0b489

  • SSDEEP

    768:uyIWAEAOn2fvESB7DXZhKJ526I4OgW6rywkp7wbmy:u0pnUsSB7DXyOgWrRpcb1

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1