Extracted

• • Target

    77c6964461df552786f59768ccc92f11a02fa049e33bb0ee40c300ab87f4cd02.elf

  • Size

    45KB

  • MD5

    0ec3e3d17600b20173763cf74456b189

  • SHA1

    8030fccb73a1bee22d942adb4119ce5795a1508e

  • SHA256

    77c6964461df552786f59768ccc92f11a02fa049e33bb0ee40c300ab87f4cd02

  • SHA512

    44334384f467d3252702afc70c1cad6eac897d850c924728070ac340657f633d71f322e687872ce96def515c0f4e45a25eb13f6ed7221c32fccdbd7a77432dbd

  • SSDEEP

    768:B2DQtz/oSSCNMBUYDIZnZKgRD57GEVLTvLF8+nyEbIsoAH1gvddpH0QSjqahHh4y:8st9AB/MfRD57GEpjhyE0s1OShHKzEL7

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (23593) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  behavioral1