Extracted

• • Target

    morte.arm.elf

  • Size

    47KB

  • MD5

    4cf65fb24e75069b21eee31ea06b6450

  • SHA1

    b76bcd100bd10ff9a3015ac44cccb51bc63e8f7a

  • SHA256

    2d8a8e332cac45a6a3c6e6ceb43ea2e17516595231845f241c29756293fc34bd

  • SHA512

    d97ba3317f5984e18a834fd2a1491930ff8e248e7d4d888d30f176d4eedc3d0e399a4062e6331d50e19abc7b681fe0452c77d4b3d6773a7a97439da66bdec723

  • SSDEEP

    768:rzkbydRjkpM9sBIc6lxn7JSaPQTAXjDaD8TTRd+Qwm21MbCe7bQIKNs3Uozy:rAbysC9PcMlbFjDu8RQbFMbbHQFQzy

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (24084) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  behavioral1