Extracted

• • Target

    e9864a3839308830b0f106b8ed3779387d936091ac4ab8644131ef1da6fd13d6.elf

  • Size

    64KB

  • MD5

    a57993b9423a149419dca90f0399854d

  • SHA1

    c1b5ca5e66eeb74162eebeed20483bae0d966b6b

  • SHA256

    e9864a3839308830b0f106b8ed3779387d936091ac4ab8644131ef1da6fd13d6

  • SHA512

    5ba9593ebf42450099590e5c6787465dc9af7ac081588c559c2e5335a7542722e22b27312394bca1be522d25ba11ba5881f802acd2cdc53d84543dc6c849700b

  • SSDEEP

    1536:Qa2gpfCCeK74vc1KOm5lgMnxiKze8eNOvf1S0qS/4Qj5hYoLz5xqOE5tS7O6:mgpfCCeK74vcI5lgMnxiKze8eNOvf1Sf

  Score

  9^/10

  defense_evasiondiscovery

  • Contacts a large (23511) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1