Extracted

• • Target

    ub8ehJSePAfc9FYqZIT6.arm7.elf

  • Size

    60KB

  • MD5

    11851bb78c0ea71f7244c27d273f2711

  • SHA1

    31492acb7ef8a1b7b574c02eced5e6d1408e2fe6

  • SHA256

    7a9c7569524cdafa289fc13aab11c4c7bfabee92468ab1d9071cf87456dd5a01

  • SHA512

    66dae4649ff64f21193b9008e3331564f5587e0ab5becee390879fd945ed1a4b7b88ffe40c7889abe9527aca44b0b485e56130b8756db50bbad322bbace96c36

  • SSDEEP

    1536:pm4ZsRNIErdyCD3FRbG4fVlssvG5CuGK8ilrLp7EzEDhz:pm4ZD0dykFR5NlaK1OLp7EIDZ

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1