Extracted

• • Target

    sora.arm.elf

  • Size

    93KB

  • MD5

    3c9ab36542d142f8b55b86a0af95c6d0

  • SHA1

    750a69cad0a25ab105e7ef3a7b3e4ccc888c1f37

  • SHA256

    be09848e5be4105d9ec52c6f32c3bd0ddbc07b3f8c34ef7ce2a2e964429e9c0c

  • SHA512

    f065350c35a7d30274e1a423a63bcd6de04b1802487a3614a765dbe1493da2f26732179debd06db55d6a43f594f6e3968d17ac96aefd00610e61e0e89d120c80

  • SSDEEP

    1536:tn76I8d6zcqSvSshT2y0mqXNSp022ySNwMhWO5mOdahSFZnWGbEOUvpD5i:J76z4mIUp0bySNXf5hd8SCcE95i

  Score

  9^/10

  defense_evasiondiscovery

  • Contacts a large (49705) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1