Extracted

• • Target

    d6cd24b9a13a5c13f39d99bb38819eff21758e569d1646b9d2f1d117d1866720.elf

  • Size

    34KB

  • MD5

    5fa448eea7882878f2cd6b3f95f03b4d

  • SHA1

    ea362d1efec710494439d73d95e0206d31d6104e

  • SHA256

    d6cd24b9a13a5c13f39d99bb38819eff21758e569d1646b9d2f1d117d1866720

  • SHA512

    3c234c92a310ef3798e133e580b2332d91887c9cabbaa2584606397beed0940c63e3f330df123d7a89d4419c5775fac7fb807115a74750ea96f55235409666c0

  • SSDEEP

    768:/QTnE8obQIh86WT7C0oMHXsnOK2YB8xC2zJgGlzDpbuR1Jx:/SnEdhXMoMHcnEYB5qVJuL

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (200704) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1