Extracted

• • Target

    699fc59720a38b194f54ffb5b9b5899c6983803d6e9f535259876a8cb5e9ca2f.elf

  • Size

    37KB

  • MD5

    7d7ddba8440e7ea041652feffe0a7afd

  • SHA1

    7501c3c951c06f21c4c372f3d44a729021d2a8e7

  • SHA256

    699fc59720a38b194f54ffb5b9b5899c6983803d6e9f535259876a8cb5e9ca2f

  • SHA512

    79af8a2c7c451cd180882a44a8ccb0ccea0e491822539dc19bf70760e8e0666fd43aaf97384f057f3e7e48944cf00db067d415a4cc0c2eedc5971ae6e3ab6ca2

  • SSDEEP

    768:W35oFy/HvOCWiKncau2SbLIYkmF4smRpw/pN4NapyEvL3UQ:1Fy/HmN9cau2e0YkmFLfAe

  Score

  10^/10

  miraimiraibotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (178657) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion
  behavioral1