Extracted

• • Target

    71a989ffc285cc5c5b85b6a764b9e443c70b6c00f0a9a20223caf096ad918e8c.elf

  • Size

    36KB

  • MD5

    a1fbbf6c3cebc40a95c8c892f5d5853d

  • SHA1

    7cd52536e9cac273bb8a6f8a59a84f28c57ebf61

  • SHA256

    71a989ffc285cc5c5b85b6a764b9e443c70b6c00f0a9a20223caf096ad918e8c

  • SHA512

    168727ad717c681415bf6f2385581db485b0cacfb42587baf26b3ec38c43702be42130074944a32838cd096ff1bf33113105c9ad4f1686a7b447e3258b727520

  • SSDEEP

    768:YgahCSql2HnfPQfSaVDbvlyIUAaPXHk4EBU3UZ:6hT/Ph+yIUAaPXHTEBz

  Score

  10^/10

  miraimiraibotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (196172) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion
  behavioral1