Extracted

• • Target

    9a2399175aee94f641d7ff8249ebf2d154a7925e5a4c2523e367149f4a3fb844.elf

  • Size

    65KB

  • MD5

    f367225d74f755b8cdd1b92f00b72e07

  • SHA1

    717df671ffb22035ae02ffa49772fe9dcfc29c9c

  • SHA256

    9a2399175aee94f641d7ff8249ebf2d154a7925e5a4c2523e367149f4a3fb844

  • SHA512

    8245a2a3488e313e3d603e794b8f113743b2889af20427980c946f2256671fe90fda191850b7b89ba82e4956d882224f0e6eadb7bee688edb96fcb4b1de5f04f

  • SSDEEP

    1536:/NFp7KQXRgoXRSEUV0wR56Q0X6P29V0RrSRGekCzOWl1noseaxshg4CUchSsd:1Fp7KQXRgoXRSEUV0wD6NqP29V0RTiOs

  Score

  9^/10

  discovery

  • Contacts a large (110807) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Changes its process name

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1