Extracted

• • Target

    2e54845a3bc6be86f083ea5a5a6d3f95c8c8f9fdbdad516be89d97a54664c25a.elf

  • Size

    74KB

  • MD5

    82038cbbfd933609cebad8c15478bde3

  • SHA1

    5c2c9713981a8b97bf80412c2702b2cb5ead3810

  • SHA256

    2e54845a3bc6be86f083ea5a5a6d3f95c8c8f9fdbdad516be89d97a54664c25a

  • SHA512

    292e7bda58d5be06bcf748eed9ab25eb8f23c2ed6a881cd43a51437dd22a6d2a7115de3375e27685b1111da1a82bba9427cf9c08e68a0f907a40fcf00e9f5cc4

  • SSDEEP

    1536:IrWlPDtBy4zSI72ycFfVmbhWj7YsAERhQXvgdwbZnN:IraPDvSkcFfVGhWZEgdwbZnN

  Score

  9^/10

  defense_evasiondiscoverypersistence

  • Contacts a large (20912) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Modifies rc script

    Adding/modifying system rc scripts is a common persistence mechanism.

    persistence
  behavioral1