Extracted

• • Target

    2f2d3f1980929b0a2b8656563c68e0a96559c6ef8f5d3c8337cae704b2b6fc3b.elf

  • Size

    50KB

  • MD5

    59b173c85153381d64435871845a41cf

  • SHA1

    9b276c7cfd660d7546f8c9d1394012511f72d713

  • SHA256

    2f2d3f1980929b0a2b8656563c68e0a96559c6ef8f5d3c8337cae704b2b6fc3b

  • SHA512

    06fa36b3adb340a5a511731754ef95a6f7922a8c7c69144326c9b0e42f01bb334d356064794a1edd291728b544f2f74f6ed0de86f2c75517537f9ed9ca6465a0

  • SSDEEP

    1536:l1sqfvYXEgf3hpfnRbfBI4Uc1qtKk0wSarmjt6:/hoUAnRbpI/c3kb9656

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (23917) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  behavioral1