Extracted

• • Target

    bf23fbc3fb2294d577d408562d061d1d.elf

  • Size

    89KB

  • MD5

    bf23fbc3fb2294d577d408562d061d1d

  • SHA1

    ba622f06c935f9685a7cea5e456c5c3111636df0

  • SHA256

    3a7739ddc9e0efc1391fabe38d8bc8ff221676628b678bba11345986d8a4f4c5

  • SHA512

    07fc7769a281ba93fff0d5847d963d29391d711850fb0ebf74c80898b2cc6d5ddf4e6f526ef89ccdf4bc7ef821bdac97c6a4b3db9657edfc35e9ad970f46fb93

  • SSDEEP

    1536:NYCYxrXP40ODyPwHRQ9PlzTRfyToNoZq/i:qCYxrKDy46N0

  Score

  9^/10

  discovery

  • Contacts a large (20333) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

  behavioral1