Extracted

• • Target

    2e447f7ec23cfe7329559c4acaf87f90be77d219004904b2652954e2ac492418.elf

  • Size

    37KB

  • MD5

    3ad65bc28dc97b946f2f4cfe7af9dbcf

  • SHA1

    eb143e60b001f0ba83571365a6f081a3018001aa

  • SHA256

    2e447f7ec23cfe7329559c4acaf87f90be77d219004904b2652954e2ac492418

  • SHA512

    2bd84b5b2ec383b815e5bd603abc3adf2501bb7eaa661529e1db13e9d48044c2378f808b159c1d6d87927f09ab72ab336faa3493694c14ba1eda6d21b45ba7ac

  • SSDEEP

    768:ea+BWS+ZPwIIBPGXna4nvdQL5zc6R96SMO/ieUeSMI1vmEHfnbcuyD7UrQRj+:ea+BH+hKBAa4Vcc6RwSMO/ieCME+WfnP

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1