Extracted

• • Target

    cccc02d982f739ee48e018d652b3a7812c6790aa7b3ddc2a5403fb2fe7d78002.elf

  • Size

    50KB

  • MD5

    de9c31c51221e49819bc2497824ab005

  • SHA1

    10217cf289d90e12d9c596fd39ec877af4d615d3

  • SHA256

    cccc02d982f739ee48e018d652b3a7812c6790aa7b3ddc2a5403fb2fe7d78002

  • SHA512

    920718e260420630f1e53c85fd0187f998f428d7bb1b43f0c55606332d61579bbd57cfbe3501695411888ab1bd4309c691e0383a9d03e4c9506424f7cdd72bee

  • SSDEEP

    768:BTrTBJlgQHkQ6yXO2HkU+cPjoT99clvkoSjrya5NPtBt5/Ns7SIy4hg:lrFJlgsNWcPorc1Erya5FLt5sX

  Score

  9^/10

  defense_evasiondiscovery

  • Contacts a large (179675) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Renames itself

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1