Extracted

• • Target

    0400258af3a2ac3f5fb9a4e9b89266edacaf60748b97ff4647c47d63c4f8cf93.elf

  • Size

    50KB

  • MD5

    6ae75b62675776c0bbd4e0671567bf5b

  • SHA1

    af2ba85e551993c88380d79736412e2da64ec3b3

  • SHA256

    0400258af3a2ac3f5fb9a4e9b89266edacaf60748b97ff4647c47d63c4f8cf93

  • SHA512

    f8e6672002cd1f82eb1c2b2278449c87179b70304ea452c6a0d8991d699970db5e1bf1ea80be8469c77f0301b8a304614855d0b163c9f8265ef376e7cc59c2a9

  • SSDEEP

    768:NBnsoH9r5YTwnHrwf+czdTLq37ov/oeEuD8rWI/hzyax/IBtNszJcKkHgA:Dso97LczV2LCKuD8yI5GQg8js

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Renames itself

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1