Extracted

• • Target

    morte.mips.elf

  • Size

    46KB

  • MD5

    93ddd50c7bab595ad4c6f23168dd2002

  • SHA1

    cd292d24642305382c017a16b2d9ba341b0d388a

  • SHA256

    59ae78a379ad9db6a114d12572617201371974c57e6823088d713f1460192484

  • SHA512

    50bcc0665734c3e4922c77214d512fabcb2fae3c0f46ef0bf73ed2912e54420daff0c7154a44977f9aab9b2dbddd4527e8fb93dcc4d9cc9622f329bb7bb75122

  • SSDEEP

    768:63BlUFQqEGjFYIipWS+2H8OCETh7oAPSrDC91UeP//CAqdPQnQtutJgGlzDpbuRu:FjjxS+qCk6gSvCXUay9hTtuHVJuU

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  behavioral1