Extracted

• • Target
    dbg.elf
  • Size 1.0MB
  • SHA256 5bcfc51337f994b6b8c31f35ac840a2628b359e315ef4a412a607611e95abcbf
  • MD5 0d3942c1b3ce9040afd3c43f5b2b6d71
  • SHA1 71b2598d969eec7ef096874ade770be431bd3899
  • SHA512 bd9d4b816e6ef8e050ea09926fdc952b96e5b2504a3bca76140d962471217a283b69ea89f03c87c6a329bede0aa741620e8082a86bcd4dbb396e2ed56d976441
  • SSDEEP 24576:mH+d6rkvq5GNgwUz3eeL6W/zELLjXSia:6+6F5GNgdzOCF/oL3X
  • TLSH
    T1AE357C2EE2B2F16CE017C03417DFCAA15525B07926312D7B36C4AA353D6ADE16369B23
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  botnetowaridefense_evasiondiscoverymirai

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (231720) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  behavioral1