Extracted

• • Target

    Hilix.x86.elf

  • Size

    52KB

  • MD5

    0dbb0bae0054d916eafeada37fc7b819

  • SHA1

    e7670a20ce0edf5c5ff38bae473995880e6757fc

  • SHA256

    8e57192985c90a59e2e0056d28ac3d279e072afa3014626b11089b68bc3fb4a7

  • SHA512

    70605d8ddcf4737724d4a90c1fda95eed38ea2ef02bec972c441345bea64525283cf05ddd63873da9137ab0d4ff7f7d233e13f2ee476728c821c4ea5d67433b9

  • SSDEEP

    1536:s8OP6OftfvJfrJf0hJeVVMq3Zv78slC8KObYcPnYrTGGgvcT:hOfVxfrJfAJ2VTpwslC8KObRnYrqP

  Score

  9^/10

  discoveryrootkit

  • Contacts a large (181535) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Loads a kernel module

    Loads a Linux kernel module, potentially to achieve persistence

    rootkit
  behavioral1