Extracted

• • Target

    0ed5cda2f77c36ed45d40bf6fc72e30a8a85d71482e8efb0729277a6eb06285f.elf

  • Size

    34KB

  • MD5

    23d32e07cce0492a5264708f8928ccb3

  • SHA1

    b6a776f0aefcbf8796a6b4f35024a48e9f64c322

  • SHA256

    0ed5cda2f77c36ed45d40bf6fc72e30a8a85d71482e8efb0729277a6eb06285f

  • SHA512

    ba38cd5d4bf5eb2bb6308cbdc525367a2faf5c69236d0a921021ad8fae45ba946118ea357cbd4830958933023372c53866652ce7015d9b514400cbd885f470dc

  • SSDEEP

    768:f0hi6c3krEDJjRIpKlA3FxmW4s6MK66pyqdfJhb+t:968kYDJVzlA1xmdiK6We

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (23591) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  behavioral1