Extracted

• • Target

    IObeENwjx64

  • Size

    1.1MB

  • MD5

    0f07ea9584a6fe034b6a689a85c96cf5

  • SHA1

    e015f5ff2fb9d9e6027039b35764236a381bc709

  • SHA256

    6b5ca4343069c5231425e01ed23951abf0d3021088d633cdc25f4401bb0b8e15

  • SHA512

    f7776ea13bf83f69c9592f4636e51bde1fb1d0a6016b3a03bab0594c83ed3918dae8c3a7757bb96784f01771a68ac38415a42b77e6cb55ce7687359ef5dcd978

  • SSDEEP

    24576:4yZpLqAqEqSy9mFiMmY9kpmEAiUPpDE6bJ:4qpLtqKy9mFEY9zD

  Score

  9^/10

  discoverypersistence

  • Contacts a large (627762) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Creates/modifies Cron job

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    persistence

  • Reads CPU attributes

  behavioral1