Extracted

• • Target

    morte.x86.elf

  • Size

    35KB

  • MD5

    c3ab76f0ae33671f000479ea96c20623

  • SHA1

    86bad9affe399e4203af9b3af245b26f6e99a644

  • SHA256

    5429b6c53444238c6b022fda5814edb7b4f93649fc5cd20c3faa01ee688ed9de

  • SHA512

    8dc92843d5f942817ebe290a114ef54b5acb282dce8c43e9913c10b5b03711fe555b8e260a5bc77b25a6a27998bb8759f3282aa0dade7e3505a7b2bd47b61f2b

  • SSDEEP

    768:xX/BiLENuBX+bew632apcmiRd5j6cRDNyZ5kp23ka5kq7rIXS:9/UbX+q1TcnnRy7kpwzCqgXS

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (23760) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  behavioral1