Extracted

• • Target

    7a8e6994061f365c79471eb3800ca239.elf

  • Size

    74KB

  • MD5

    7a8e6994061f365c79471eb3800ca239

  • SHA1

    90ea1c68b209521f8c5532ce8dd5f1baaed8ede8

  • SHA256

    40f2403aa7b8100d20a86a69484b453cc56c59719d7c662520725680fefe2477

  • SHA512

    e345d972d60bea4b9983560cb4fe864b39282afd1d4413aa1dfcc59687b4ce14b7cdb8a95f4ee02ac75abd4e2421f8c74234f7ae1d0ea156fb912268c1f89ec0

  • SSDEEP

    1536:94JgmfSSGrW7cIVfXJRw1MSkHCZ1UKWYS:9MgmfSSGrwHJHC

  Score

  9^/10

  discovery

  • Contacts a large (83871) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Changes its process name

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1