Extracted

• • Target

    591e50216af5c3970b070d2c1aa46a2b5990c84ebb9f04c2a61a2d0add3bdac0.elf

  • Size

    69KB

  • MD5

    4b6eb96c15bfd951b6445a84dd6a5abb

  • SHA1

    dbcb159fe0edebef124a69179304c66fe5b7d42a

  • SHA256

    591e50216af5c3970b070d2c1aa46a2b5990c84ebb9f04c2a61a2d0add3bdac0

  • SHA512

    93e232fae405595dab57eca1ff263e9dea506562f4365d90cf065609c11ac69bdb146e8bb8606bcb9837b95db3111ec2026bc85c75c13559e54a6ef6a6480556

  • SSDEEP

    1536:pnUQJZdRlDAXO6QyQUK6+QWZxehp3uJ7RvsuIr5bhO8A:pnUQJ7RlUXTQpUK6+QwxeL3q+uWDA

  Score

  9^/10

  discoveryrootkit

  • Contacts a large (37873) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Loads a kernel module

    Loads a Linux kernel module, potentially to achieve persistence

    rootkit

  • Writes file to system bin folder

  behavioral1