Extracted

• • Target

    72ae4fe533a7a89ae8812f4f42255f4a55fef489292c7e85b96c05dbe0797ced.elf

  • Size

    44KB

  • MD5

    b467141396a206ba5894b4aab2efb128

  • SHA1

    acb37451932c7ca920bd41b8e8b75ac53226a2e1

  • SHA256

    72ae4fe533a7a89ae8812f4f42255f4a55fef489292c7e85b96c05dbe0797ced

  • SHA512

    146584e82604af347bf9295d44b2bedd82e89b671170127daea6db59e0dac401d3805e98875789673296fa989377eb10e476fc565f460c71e77deadbca55accb

  • SSDEEP

    768:MMH3LiCc/iBjzhOkLWldfKTjjPHL/OUCyJ32zX21pc38:FH3LiCc/iBjzhtKldf0HSUCyd2zXKK38

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Renames itself

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1