Ghidra

Static and dynamic analysis of an ARM64 ELF sample from the Mirai/Gafgyt family.

Ghidra script framework for automated static detection of malware behaviors: anti-debug, anti-VM, packing, C2 indicators, process injection, persistence and defense impairment.