Extracted

• • Target

    dbd61902008081b2bd2ec0c626226c7130e9d3cba1eaab36d9d491ebdd64eb76.elf

  • Size

    64KB

  • MD5

    05cf17a867bf0d75023518b5152ecf80

  • SHA1

    38e0def15f59382f9965f285eadc52790bd36941

  • SHA256

    dbd61902008081b2bd2ec0c626226c7130e9d3cba1eaab36d9d491ebdd64eb76

  • SHA512

    8bf769ad04ecbf6ce98337d39e3f22de200f914b84415dfa7457ffe45c611064dcf023fe42dc4593bb6ccb239406cf43ac7e196be67a4f35b607c7b44385558a

  • SSDEEP

    1536:IIG9170vwHbQXZ5+qXDEuXi9aBSW7V/DjObeFt6PuQ4Z4:I917iwHbQXZ5+qXA59eSWZ/XObeb6GZZ

  Score

  9^/10

  discovery

  • Contacts a large (20891) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1