Extracted

• • Target

    9713c4392e169afee76427627d374ba94b7d6af6e95a42a27c62995d2ed589ab.elf

  • Size

    48KB

  • MD5

    d7bd135df49353b857d30ae8ab169a2d

  • SHA1

    63de062b7f7adcf7ec52aa33b576e818b9fde7db

  • SHA256

    9713c4392e169afee76427627d374ba94b7d6af6e95a42a27c62995d2ed589ab

  • SHA512

    a3e4ff67260f8ef9216d5b7cc37e031042bd415b14fdc85ff3a773a3b3fd69091f499130f023beadd25ea27ce21c9ab1d46edcb6ee11342f1e22818428040501

  • SSDEEP

    768:hWBpIQXdu4b/LU4ZlByuBfZwhdeTNh/RgzOkxXu7jolcpqTWJkeu+SsPQIHBx05+:QsAzbyofZaag/ARqTWKmoIhS+

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (23763) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  behavioral1