Extracted

• • Target

    f65a49ad21b980dafb33a4b110396337ccd83b4e6e87a494cc8c8b809938030a.elf

  • Size

    108KB

  • MD5

    25a5766ab198742fbca191bb06b221a5

  • SHA1

    6a3ecb6814fe115b1048856be0542aafd5a3571e

  • SHA256

    f65a49ad21b980dafb33a4b110396337ccd83b4e6e87a494cc8c8b809938030a

  • SHA512

    6d20b507732540114b4aaab4163c2a1616c16ab7812d2b133c0b290f9b99424347c6a9823bf059ea769bd51e2007f611fde0a13589381e99077811aa2a108275

  • SSDEEP

    1536:JvumDCpfSvaRyqTI1eNQ+PA8MtP44JoFD1a56Lz3mCLtCcnJbSq2QkkHIJv:gP6vaRX6eNdA8K44+F5YQ3ntxJ2HkHI

  Score

  9^/10

  defense_evasiondiscovery

  • Contacts a large (76261) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1