Extracted

• • Target

    e1245fe7825242a19c87b04b3bb3c4d20c8562df664a881508b4268309108251.elf

  • Size

    106KB

  • MD5

    ea32efb911185778be600ecedbe2ddbb

  • SHA1

    8c73f43408256526beba33215be7845798b63910

  • SHA256

    e1245fe7825242a19c87b04b3bb3c4d20c8562df664a881508b4268309108251

  • SHA512

    a12f54044e22298d96310560186e517041a338ba4719a038ec48cc2bbc6ca34166a774534d6cdb5019213528c7016d8df63b650a108d0197692fafcc3638901c

  • SSDEEP

    1536:iAX2gnezXPlAGhpwC4S9P2uI+yXVJZPTnZSu3aCwmj9+:ia2gnezXPllh0lJlTnOE9

  Score

  7^/10

  defense_evasiondiscoveryevasionpersistenceprivilege_escalation

  • Deletes Audit logs

    Deletes logs related to the Linux Audit framework.

    evasion

  • Deletes itself

  • Deletes journal logs

    Deletes systemd journal logs. Likely to evade detection.

    evasion

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Deletes log files

    Deletes log files on the system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Modifies systemd

    Adds/ modifies systemd service files. Likely to achieve persistence.

    persistenceprivilege_escalation
  behavioral1