Extracted

• • Target

    2035e7670f21260b78383c52179ff6ed96f28dbd9969c9c5c27c73bcda5652a3_JC.elf

  • Size

    61KB

  • MD5

    06b001d4a18e252a5ed774468e916b8e

  • SHA1

    2ed9625e58055642f1476617410a64d37b50fade

  • SHA256

    2035e7670f21260b78383c52179ff6ed96f28dbd9969c9c5c27c73bcda5652a3

  • SHA512

    989d597f330010b6c89e5bb9bae73e3b2274c853aa4623e34a3c6d113f7a9d1f50345cae89c1fcf627daf8247adbf53716c792128672bc37dfd09e5f6984a6b1

  • SSDEEP

    1536:homhD78mgB03Z5vcYEdGUGU6+6DG5xzy6VXnUQvISBkH:R7EYHvcYYGRUt4Gbzy69UQvLkH

  Score

  7^/10

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1