Extracted

• • Target
    e70745807f277cf046c8ec352b296f748a3fd497f4f0b2e0f6818e37608051a6.elf
  • Size 39KB
  • SHA256 e70745807f277cf046c8ec352b296f748a3fd497f4f0b2e0f6818e37608051a6
  • MD5 5b62c40b07e45ac48e8a0a406ddc3011
  • SHA1 6e02d50b0f4a648a57786666bdc56cb98e6f28aa
  • SHA512 71020e6aace9636a4978574b2c2a5530cacc7bc29a72cc6db4f188c9b6d8f2d8a20397eed931209bab5ddf04d32ea92fe7a10f86fdd4cd984e5347dec29b3179
  • SSDEEP 768:xcQsjJ3q8xOR5PSHqZ/Q4DEwLle2n3bUW7NUQN5WJqjDonbcuyD7UGQRjF:xiY8YdSy/wAn3bUWHinouy8Gyh
  • TLSH
    T18503F116E6AFEE0155B43135386FB20B6210E64464C87195A9CCE174EE6EE2F692CAC3
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  botnetmiraidefense_evasiondiscoverymirai

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (257434) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Deletes itself

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1