Extracted

• • Target

    420055a9e3b1a12b033aacf335fb123dd10f99c2672c70768ba0747c3d7cb13a.elf

  • Size

    267KB

  • MD5

    ecca94847737a4a0f081c17988ed76c0

  • SHA1

    364ae8ee32048ecf902501bfb1a7ae0b4201ad5e

  • SHA256

    420055a9e3b1a12b033aacf335fb123dd10f99c2672c70768ba0747c3d7cb13a

  • SHA512

    6cb1214ac592fc2772126b68c036b52bf79ac54e0ecacf45f819f2b9e9a50ae671c608a4a5c6af9e3b1bedb64ebac5c654b9a873364ec12191391b34ea6d9467

  • SSDEEP

    3072:4jUJ6jNDUR3H4AJ5R9QQZ9AAbVqhlE7hMkxh9ngv1iKGAMP80bjVM:rMjR+9jpIqqhXYOv1iKGAMP80bjm

  Score

  9^/10

  discoverypersistence

  • Contacts a large (277440) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Creates/modifies Cron job

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    persistence
  behavioral1