Extracted

• • Target

    bc7059e019b293b0937222bf07c2be72d66307d45a5ff50607d27938f4ec461b.elf

  • Size

    79KB

  • MD5

    c131e358ee209a59566e649644577cd5

  • SHA1

    cbf6266d8c512a593c4f13dddd9a127af89559a7

  • SHA256

    bc7059e019b293b0937222bf07c2be72d66307d45a5ff50607d27938f4ec461b

  • SHA512

    5a48696b73847186e0e7ea8a3bb687bb457556ac3b96c4d60e10cdd80d226477c292f25132aaee31e38d4af4689d1de1220b7e9c3283b6fff45e5a4b40b9e58e

  • SSDEEP

    1536:SuSFceW8JP33UBLwYpWoPPcsVsSbBD1OVeBSqR:/SqeT3EB8M1Of

  Score

  9^/10

  discovery

  • Contacts a large (10476) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1