Extracted

• • Target
    Sx86
  • Size 29KB
  • SHA256 e3ec243c8f2234796c444974be84bad9359f05bc77a4d7f06a538cc434e0e1a1
  • MD5 41d1cfac36c090663ce6818c123f38fb
  • SHA1 3ed7a75238911dc3437a3332f27acc7ffdbfed54
  • SHA512 7ab01d13d0e9fddbbab9e1e03984641bf84f8902664958cb81af09cdb2165f93d8e10bfedacffa7365f7ab7b7f4936ef8c667318546dd40d5e3bfd7c2789c42c
  • SSDEEP 768:qKpROfidrsa6UqW0snHit7JbmEwg4GEEIP:qKpk6doaFCtVmE7Jk
  • TLSH
    T1C6D2F1E8A82F0153FD5803FA210F280155E76CC683B8C582939DD67C796BB86B239F56
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  botnetdefense_evasiondiscoverymirai

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Deletes itself

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Traces itself

    Traces itself to prevent debugging attempts

  • Writes file to system bin folder

  behavioral1