Extracted

• • Target

    1138471019e0b084fddab034e28b36ebf1080e173904b858a565a76fe527ccaa.elf

  • Size

    112KB

  • MD5

    5422ffdde1661ac0a613efc86a6a99f3

  • SHA1

    418a38e3194b40199a6f75f548fd52d65eedf97d

  • SHA256

    1138471019e0b084fddab034e28b36ebf1080e173904b858a565a76fe527ccaa

  • SHA512

    f4b886608b9bb89d02751bac94eff05908a5ecb12ac3a2e60a4bcdaa07629a656df0668a51c99b251bb60374a9c0638f5d4abe8a182fdfb72f6f931eb55bcc3e

  • SSDEEP

    3072:Rpn1nyJ4P3cE0Nm2SCXk/S3edgeOwcmqBemEz:Tn1nIOcE0NAxS32gHmqBemEz

  Score

  9^/10

  discovery

  • Contacts a large (54496) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Writes file to system bin folder

  behavioral1