Extracted

• • Target
    dlr.x86.elf
  • Size 1KB
  • SHA256 5bb5669ddb294bd250442a391f62459824367b311d2c2dad7d3ac0928e4932ab
  • MD5 589c33044e81f2f141236e4a2698c5e0
  • SHA1 fca2d34796e187692ae82d3c302d653e9c4353af
  • SHA512 c7b1e0caff4ccbaed8860466c89d2858f7b3415372bfd4e465274e491708294e854ceb6710adaaf2106284b15e5e0bb19a30e9f65b535d20332efbf7e18ae7da
  • TLSH
    T16C216306DFCFC4A9CD270538282FA7194AB02D58501CCF49DB141F2A8CEB71A1A58660
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetsoracredential_accessdiscoverymirai

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (46092) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Executes dropped EXE

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Reads process memory

    Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.

    credential_access
  behavioral1