Extracted

• • Target

    hold.arm7.elf

  • Size

    153KB

  • MD5

    e4f7204d3431fb4bb48ab247f08505c5

  • SHA1

    c824ea2861705f93410d157619690b1eb0a574ec

  • SHA256

    cd72083d32d2efb6e016141e71b54d3ac540c6a9fd4979a88cb688aed7cee276

  • SHA512

    891d0cd38615cbc8fde0e903343abe430a641cc05c49883b80d87e6c68e70eb8373e2e8b0b4d5e63ac24fd2f798d2425aad7751e80f4dc70c1002c2ba75e634e

  • SSDEEP

    3072:MkwTyVP7jvOXB7ayLZhzXYhBLrAuS2NrGFWS4PRM/9UrPZ:MByVjKR7ayLZhzX8B+kGFWnpM/9UB

  Score

  7^/10

  defense_evasiondiscovery

  • Deletes itself

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1