Extracted

• • Target

    kre4per.x86

  • Size

    53KB

  • MD5

    7ffbdf8a1d617b2c93d5fc520ccb31cc

  • SHA1

    5dbe3ceeb1e58a61671b74d040b809d343d24b53

  • SHA256

    7c3b7d80a9f95b61e3a56a62493c5f3336eabd766a17d2d07e28d01ec750f7eb

  • SHA512

    3de46ad924e9ceab846f2a09933a1cb654e5e70c8a4bf84d395c8492470b8bcc0afc838b3f4ceb8086c81e4beba5c2884bd59a202d6c682ae58c6d2a28766727

  • SSDEEP

    1536:O13kynNjv6czSEZeLmI37KNCgoTcpoQzWxS2RAfah5cQ:AUyntv6cuEZ437KAgowpoeiSi1D

  Score

  9^/10

  defense_evasiondiscovery

  • Contacts a large (4731) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Writes file to system bin folder

  behavioral1