Extracted

• • Target

    c668ac6a5d75b41a3d9b3f0d23290fe9c41690043fa3cd533ee1c44b30c250c8.elf

  • Size

    73KB

  • MD5

    cf4261cce32c80773e92315fc754eaa1

  • SHA1

    ab0f31a66c0da8500e3e5a47aff9ff0291c79c6e

  • SHA256

    c668ac6a5d75b41a3d9b3f0d23290fe9c41690043fa3cd533ee1c44b30c250c8

  • SHA512

    b9b29941a5cbe1a906191053c8e9e0b20f6b292462b2f511f29cf5b2fc5a033d77e86c58ecf30b448c8289ec71b360aceb1a0efe9f638649dd76b1d6651b329d

  • SSDEEP

    1536:adObTH6V6vLoPzIgmRRG3daxhMpWhADv5o4W2UEGGFtRrbaiFhnh9lqP:xHyCLo7I/7G3WhMpWhAr5oMvVbFhnh94

  Score

  9^/10

  discovery

  • Contacts a large (113613) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Changes its process name

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1