Extracted

• • Target

    sora.arm.elf

  • Size

    93KB

  • MD5

    e47573062e489340397c18805d309bcf

  • SHA1

    c2890e1bd462a1d84b0037fab56b0e292829039f

  • SHA256

    9c704a6c70fadaa3c4ffab229ba33ad7972d768b1921b8e56f9822e37ab7290c

  • SHA512

    2f5c24af915ab8ce043417c856542042b53448729941869a5d4961817bee464b52dadfd39e999fe60aa9c4b936b98cf3f8dad1b4421aecaa4647535e4068bb28

  • SSDEEP

    1536:RRjV0dCycygvZeRT2qeurZY0Mki7rwEhWH56oKdm10k9zgXYw0v6D56:zjVyKuru07i7rPC5LH0w6S656

  Score

  9^/10

  defense_evasiondiscovery

  • Contacts a large (49056) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1