Extracted

• • Target

    d641aff3b80837fdf9e15510241e3baec65ea2f8d544143ac8c73dd96b007fa2.elf

  • Size

    37KB

  • MD5

    22a52ad7ce8f1cfbf7a832dc9970efe4

  • SHA1

    70377ad7d5cf4ebbf6f8f4b0bde269e062290bef

  • SHA256

    d641aff3b80837fdf9e15510241e3baec65ea2f8d544143ac8c73dd96b007fa2

  • SHA512

    d63c30a68e49f9687ddd6713a758cfdc72588fce3507345f00bb91f019e67b26f1039fb55ea502044207edcf9a92229a9af514acde31857682390a65d1aa8e6a

  • SSDEEP

    768:H+3txiLhPVopS/R0I8p+NSJMXuESWi4kerWKCzOqWVX1oR5Y3Up:H+3riP2SyIfNUxES9eBkOxoR5L

  Score

  10^/10

  miraimiraibotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (175974) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion
  behavioral1