Extracted

• • Target

    7774cbb5827d8d53e7fdc56f44a8268a13420015f944d8deec12d06159273672.elf

  • Size

    48KB

  • MD5

    0eec7566f0c6fd2bee8f64951dba45c0

  • SHA1

    de51f1a7acf717972906aa3bfea8f8541d4a8b7b

  • SHA256

    7774cbb5827d8d53e7fdc56f44a8268a13420015f944d8deec12d06159273672

  • SHA512

    23e2993b74793a91214971c86228fc812d4cfa3d6fe837b5d383db3dd1cb299ade73375e590c875f640de18a32b20e72ead4b13bfc7b25c94ce5b3ba00b07de6

  • SSDEEP

    1536:pXJ8RQO/c+q2tnWrsxPdsTaSs9Hh5L5QQ:ETHq2tWQ9dsTCBCQ

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (23435) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  behavioral1