Extracted

• • Target

    byte.x86

  • Size

    73KB

  • MD5

    f7eef7a952b17ab75b3bb24d03fbcdf2

  • SHA1

    83bf20a36a93b73c1f78ff224459a797de605fa5

  • SHA256

    9928c99ec2ef2eee7df7c786dbc35f5b765e9701de45e194ab59123bdf535983

  • SHA512

    889239c925d90300423aa621777259f4d621fb232f5765b321a851e1815d1a54cc33b2535b2ab9662f08b3d8a8ddb6464a44f7f3ce3cda55a15a122b2611d2f1

  • SSDEEP

    1536:6SYXBbpKbF+5AQZKOtRDXVFx4bgMj+B3bEKoui0QOo/Y0TB3:SbobF+5QOth3+bgMj+xbyuPXopt3

  Score

  7^/10

  defense_evasiondiscoveryrootkit

  • Loads a kernel module

    Loads a Linux kernel module, potentially to achieve persistence

    rootkit

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1behavioral2behavioral3behavioral4