Extracted

• • Target

    ub8ehJSePAfc9FYqZIT6.arm.elf

  • Size

    46KB

  • MD5

    a38ea5dfea817b3e4a2d500556eb3c63

  • SHA1

    b87b837df3fe9b468f054a99bd703e93fe46c601

  • SHA256

    574302ca20d153fbfe0fff36380ae7b119eaa5694b0d390996f8913c3af4c967

  • SHA512

    d9cc096e5b1294b4e60cc2adc83b8c1a79ca7b6cd9b52d626f430803bd459a7cd94e465ecad67b88c1d1891aa1d7c5bbed3ee121a30a7b90d2aab99847949b4d

  • SSDEEP

    768:hQB89QHj+4rFPUtN8P50LdleKzKvB+WQCpirXEAk+81NnkwZs3UozDx:hA3D+4ZPUX8PaWK0B+OOXfp81NnMzDx

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Traces itself

    Traces itself to prevent debugging attempts

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1