Extracted

• • Target

    pecga.arm7.elf

  • Size

    153KB

  • MD5

    3c0bbcdb22865b5c0b86e9eb97015767

  • SHA1

    b202e6a9c862234b2287b6df1664ca4769098630

  • SHA256

    4e64cc3e81967c1b53542f1565097c315fb288621762aaf4b754f4a5ddd03678

  • SHA512

    510b31de62ce9acd3112c2f683946f9ba06ea79192444a053289831512d567b547a1247dd6ba2dfdb4be0d624cf88c25a102168749b19fe97af1169006966b5f

  • SSDEEP

    3072:xk12vV4vjOcwB7amn9l3L4BpLrAuS2CrrWWS4PRM/99nZ:xlvVWVO7amn9l3L8puPrWWnpM/99Z

  Score

  7^/10

  defense_evasiondiscovery

  • Deletes itself

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1