Extracted

• • Target

    kre4per.arm.elf

  • Size

    62KB

  • MD5

    f6afdcbcd5fa63180026542c1d431e9d

  • SHA1

    13922db0b825bb8ddef4ed653d35a98ef4e3f8b3

  • SHA256

    e33e98eb90c09ecc24ce81706969766930e24690b9ce7bd7770aaf43f73c8e2d

  • SHA512

    7241ac001a61ed4ba4e15966aa597dd5c4f0282a19fbd4113084dbea94d28b3b2cb9440e40b85991fca8d2838f0bbb089336ebec51907270cc42197e2a9a7502

  • SSDEEP

    1536:gP1IwP44TCRfNdbYakabDrzKQlG9Wcq8JJTId42+:gP7V4sazKUG9bqAJTQ

  Score

  9^/10

  defense_evasiondiscovery

  • Contacts a large (117351) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1