Extracted

• • Target

    83d2059a2c2aca3ead932f7dc3a500db615062f4ab92894b96bc496ed94b11f7.elf

  • Size

    140KB

  • MD5

    a8d7677ee8d0a71c52e521f8c82c3b19

  • SHA1

    7ddfdd6ebd319d579aa8be85e820e2d5e962671e

  • SHA256

    83d2059a2c2aca3ead932f7dc3a500db615062f4ab92894b96bc496ed94b11f7

  • SHA512

    12e97b656bdd856af28373535c7c5390c68a275051c9edff5fab68367ac68561ddd8128d1ccddf59b676929ae3be08e32e6c7cf6a4c023707cbcc27f0e812fe7

  • SSDEEP

    3072:Pib6EdR0WkESrJYqNo56juvMuK/U6YQXZaXWZ2M/9c/r:WnRpkESxhuvMuK//YcaX9M/9c/r

  Score

  9^/10

  discovery

  • Contacts a large (22877) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Changes its process name

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1