Extracted

• • Target
    debug
  • Size 49KB
  • SHA256 47260b2c5e4d49f0c738bb26b86582effd1ec9faf57de44ae6feab291071d55c
  • MD5 0d10830b66179e2c2353ae27a7991302
  • SHA1 dfd4fec1817677604e63093c142a5e3b27b3377d
  • SHA512 95492fc61b48029c76610c74d266761d37e8514835aba1f01b57f6b82e9a9e3c20148a71da7bb059971b82780298fd41e85e32bf3c4bbb110a892656d528d686
  • SSDEEP 1536:XhXnX8ajEiHszzUlQ/NFWeBjw8PIL/Puonouy8Hy4:XhXsSfMsl8NzBjwlLuAoutr
  • TLSH
    T1BD33F173A2C64C21EBFDD3371E5E669EC80CD45CF59844C99E84283698E6F1E9A183A4
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  botnetdefense_evasiondiscoverymirai

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1