Extracted

• • Target

    arm7.elf

  • Size

    176KB

  • MD5

    6d9b4dcc2c4b2637afc33319812aa90f

  • SHA1

    d80a6578c832c51f43492e2be770d2945816fdb8

  • SHA256

    2ff81e6c4d5d914652cf18225e6dfbdd6e70b03eb94b7218eb3ecd1a1d9fcf09

  • SHA512

    d84acabcbe7243b1b2e0c08ec52683cb393dd7a97ab5b5c880b5a30415365e67aeff69c22d5438250b90674f8bcbdf5d93e0a4ecbf55367bce4e8e92f820455d

  • SSDEEP

    3072:nXsaq0wQFD2URQlMpChL6fmffpagi/12kwwT738vRRIx+ZI1M/9TnMRQ:nXsaLwQFyURmMA6Mpagi/12NwM5ax+ZX

  Score

  9^/10

  defense_evasiondiscovery

  • Contacts a large (222273) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1