Extracted

• • Target
    3d93cf1e4bb15729bb011b8e9a7958de1a8f5b15632be47e32a511c04da220a8.bin
  • Size 33KB
  • SHA256 3d93cf1e4bb15729bb011b8e9a7958de1a8f5b15632be47e32a511c04da220a8
  • MD5 4e428e0686740a65efb1ba45aba585f2
  • SHA1 025822990ca38a0e6e7a3ba5ed96cf18723f9175
  • SHA512 bf46f2b2de1f60603c5f1102881e06a4419f9519bce4f4e7bf6c281ada51b05a1e42f04f27e75cca4031166ff1eaf735ec6b38b73cccd2402444112a6c8d1857
  • SSDEEP 768:LAi+wQOgPqaOTKFbTFY8f4bQA+QvBD/e+tzcUGVaIe8rWMds:LIbSaOqJY8fEQY9Dhk5a
  • TLSH
    T116F2D0AF8ED639CBCE9D4DBF0745165919ABE0D27106CB6923008C55DB2D48BBC0B4B5
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  botnetunstabledefense_evasiondiscoverymirai

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (132608) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1