Extracted

• • Target
    4e6463d03e428cc263b20372b49a5c5894a09357c9d5b6970dba010e90da7662
  • Size 41KB
  • SHA256 4e6463d03e428cc263b20372b49a5c5894a09357c9d5b6970dba010e90da7662
  • MD5 4189806adafbd3fa0c573c5dc20388fd
  • SHA1 bec98c844109b89ee8ed68c3581427c5e65fd8bf
  • SHA512 3ac15a76e630dfc86d7626fce043afa093e83ad4353fca90e41d75979293a4cbdb9791c24445b77149eb1720cce86e5cee38291b90d32355cc3a60b5dc63ec7d
  • SSDEEP 768:+201GjDlPCGZnkrbvw4/eFgS6lvUSfv5yPiZikli6kpXZrEEBx05L:+20wjDlaanG7tW2n5BU6k/EMAL
  • TLSH
    T11D13F1669B4FD534C47BA0B3A4540AE0DEBFB25ACC4D16BD08A4BD9ED9360685F01CD3
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  botnetdefense_evasiondiscoverymirai

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Detects suspicious XORed keyword - Mozilla/5.0

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1