Extracted

• • Target

    15004ff8c231aa01bad46cf8a71aa08f646e4155f598a2c82ac5a7dc9366c0f8.elf

  • Size

    165KB

  • MD5

    78e8d0437050ed177ca1b870e1285504

  • SHA1

    fdb197806f8c03b1a9d139e7035a5b10be8d8c08

  • SHA256

    15004ff8c231aa01bad46cf8a71aa08f646e4155f598a2c82ac5a7dc9366c0f8

  • SHA512

    4b69475b8436409a2286307da47bdb5a1733535a60d194a5cec574eb70492b6eec5ad57494ca0f6b8aac34157eb8419b27345a3a1e9d52bc7be376372c6c3457

  • SSDEEP

    3072:hxkUUnWy5cv49uUzJQr2eOg1Nc3xKw6uj/n2bhtBeUmM1vwmVWYvW1lvWQcY1EKD:hFUWy5cA9unKoK34/Q/2peUmylwllvWE

  Score

  9^/10

  discoverypersistence

  • Contacts a large (1129053) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Creates/modifies Cron job

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    persistence
  behavioral1