Extracted

• • Target

    pecga.arm5.elf

  • Size

    37KB

  • MD5

    ddc66dddc7b835d9bb2ae795a497bd7c

  • SHA1

    50639e184610075bdd21518bc1ecab256b663955

  • SHA256

    30482b8f60b505ad06cab6af1715dbd63f896de0b91e054cc08f3f8130a7c280

  • SHA512

    aff3716036eee14c2cfa9f80f6ae32ced2f2cc070fe82608ab265f444c78a08349849e7f8450e4418b774bdb19d17bd618d7eb772176601db69e3dc2e338fa4a

  • SSDEEP

    768:lteXEQb922QIlJii5z6PaJgIxRTDpLQj4/29GNEIX0l455SK/:lt0Hg2QIlki5zzrxRtQdGiI4MYK/

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Deletes itself

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1