Extracted

• • Target

    76a5d82581bae59589ce180e8b57b92b

  • Size

    64KB

  • MD5

    76a5d82581bae59589ce180e8b57b92b

  • SHA1

    eaafe32c7d49350a810b8e58c7d09af8cfd8acd1

  • SHA256

    45003da00855fde55ec9c2746541da014aa3b78b5502b949acca7cd590c73f6f

  • SHA512

    c7a5e1efdc457f51f301eb9b192a193e1a2b0aa2b9682e4346727fccddc63759bbcdd9dbb5d80bc5394254c031c7c8bbf944d5962d161741e1e245bb56723906

  • SSDEEP

    1536:IkF9170vwHbQXZ5+qXDEuXi9P0SW7V/DjObeFt6PuQ4ZA:z917iwHbQXZ5+qXA59cSWZ/XObeb6GZZ

  Score

  9^/10

  discovery

  • Contacts a large (20787) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1