Extracted

• • Target
    9a37429d057b3650f77520b37103536af70133efcecd8298c7a3de17d7c683ce
  • Size 28KB
  • SHA256 9a37429d057b3650f77520b37103536af70133efcecd8298c7a3de17d7c683ce
  • MD5 80402924671815d3db663b24064e81b6
  • SHA1 e577a331658ec6cdcb8f7fc3bc1b99897b03d887
  • SHA512 6242428836e161461720888307f3ee1a713707d6a1f1f098ae7e51e84ef1dd7e8853986a7df1e10a3fb4b42d8ab82dc103ba281392836cb325a129edd364692a
  • SSDEEP 384:NyEAko6hjcwS0VDkkyn3zYZPMH6wGd0tLU0lb9SV5/r5qUpFQRf4i2gxO9LwStBN:+whjRDkkvUHnJO1rAUpWRfKgxCJwhsB
  • TLSH
    T192D2E1ACCF24482BE6F1C0FAA255A55937B7EE0B027F6FED7CC8048614732A90924775
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  botnetcondidefense_evasiondiscoverymirai

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (54918) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1