Extracted

• • Target

    caa05c54d704815ce46b9a1725b56a1dad22b76f26fcf2f19922167e175346af.elf

  • Size

    65KB

  • MD5

    a40fe02ba8c29227c2f6d00c6f69cc5b

  • SHA1

    fbdca837baee99cdd3e79bc99d565b9bd875299d

  • SHA256

    caa05c54d704815ce46b9a1725b56a1dad22b76f26fcf2f19922167e175346af

  • SHA512

    70d42b3bb0b1ff699d782b983a4d37decde3eb044695e24d9c909f418b7536c98c7ff1308be778ed88a29a2685e1647ee11bd972eef9e3d5c197945ced1cd3d7

  • SSDEEP

    1536:/XTglmJ5fEi/RRBVWyiW2BEKRLXUaLGQgb4SZq+GgPm/bj:/XTjai5RBVGJRLkYSZb+j

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (23111) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  behavioral1