Extracted

• • Target

    8d067840ee0530be3bdbd994504d54cdef590146db9fe2e07901b72f0ae0b0f2.elf

  • Size

    162KB

  • MD5

    342a8451e599df45b1939b3037a3c419

  • SHA1

    ee2ecba6f84bc51430ad37e494652280defd3867

  • SHA256

    8d067840ee0530be3bdbd994504d54cdef590146db9fe2e07901b72f0ae0b0f2

  • SHA512

    01affab648c42658840d370960033f1aabd554d801aeaedbb3fba51937691746da94a5e1e88b38b2752ce10a028a8605e56ac04c99304ff4618fba8bc3c763a3

  • SSDEEP

    3072:Pfz/U2fX3b/CMEfJgAMGRQuJOjkErF3Di8VP:Xzc2KBgAMeQuJOw2F3Di+

  Score

  9^/10

  discovery

  • Contacts a large (307238) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1