Extracted

• • Target

    e6e192914b00a8295a96acf98020aab0c3db88329b0d0b209e99682e6c6492e1.elf

  • Size

    90KB

  • MD5

    58795d4c9d5f620b48ccf3a5a15d1901

  • SHA1

    4163f71b6cfbdd2a860654b2c02c821af400ab5c

  • SHA256

    e6e192914b00a8295a96acf98020aab0c3db88329b0d0b209e99682e6c6492e1

  • SHA512

    05df4d4f672f8d0d82a529db2d8877098ccbb40480a7282d6059737af87ae67928b8cbe75c59d709580e77dde0b28f96a5badbc060be5bcea59f4331bfe34104

  • SSDEEP

    1536:VE8u+s5gBkvOWgsBZ936oqGxSmZ9lPOPPu:G8q5gGOHsDSm

  Score

  9^/10

  defense_evasiondiscovery

  • Contacts a large (117276) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1