Extracted

• • Target

    a6fbf3ff6566984190b8887ffedbf012533cc95c0d8966ab5386f547b405f3de.elf

  • Size

    45KB

  • MD5

    093dab1e82fe0e8724ff127fe4d21621

  • SHA1

    deedd828cdc52b92e34cbce9f32113ca7cf5af52

  • SHA256

    a6fbf3ff6566984190b8887ffedbf012533cc95c0d8966ab5386f547b405f3de

  • SHA512

    8212be48c4840244c5011672a7dce59d5822286d30945bf7809cfea760e72f5d5d36b2bda466ac39d1807467758c351835cf89ef61fc4fc9740c2a821dee15a8

  • SSDEEP

    768:jqsiqQPNgmJVkIr7otq08dVQKLcCRwG1xvaMLMrQmN9JDH8vL/zryu/s3Uozq:niqulJWIW8d+KLcevaMLMrQmNjHQLbgu

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (23763) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  behavioral1