Extracted

• • Target

    arm7.elf

  • Size

    141KB

  • MD5

    f750374f6f367da08c054ed08076448e

  • SHA1

    9a1e710abec662c9651247838b24d17ca084187f

  • SHA256

    9ce1332d12c9848dae72de7b7c38ddf170fc30d58015e376bd770c28462f9b7e

  • SHA512

    5b1d785b85d6722fde1ef7e1876808d245a5a136fdce609aba08fbac7ee628560e1fc9ed22d19cd11ddb0acf2e404d80897e7b380af0072005196b011f0f5b15

  • SSDEEP

    3072:/xAtAOnW7MmKdUZwJbxkjbzixYwi+kJQ3XFPqM/9M6kqC:/xAtAOneAkidkjbziqn+ZXFiM/94qC

  Score

  9^/10

  defense_evasiondiscovery

  • Contacts a large (141902) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1