Extracted

• • Target

    wind.arm.elf

  • Size

    25KB

  • MD5

    0720d1626a542180602d47e7d8198e73

  • SHA1

    c9641a7be3a98777cc632a6619fdb768319dc593

  • SHA256

    b067b1fe1b5f36b7b54fbca5d386966c8eac62d0cf92fee3292837cb3db53fb3

  • SHA512

    65ad0dcef3af3b68a753a4b331cc5b73846e20f909ca2ebed9517dd0171c846a0faff9cb956262f93b956ad243174f318a1ace4efe9561fcdb9ed1dee6cc35eb

  • SSDEEP

    768:WbrQ9NZTs+lQFej5Xu4+rHJrBIs3UozVt:WY9NZoxuuRB9zn

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1