Extracted

• • Target

    a.elf

  • Size

    68KB

  • MD5

    aabd4241f348e5012f552c4296bf07d0

  • SHA1

    100e50f0cc34df4dae9241533e281d233618dd6f

  • SHA256

    5b569915caa2c631ea99024fbe849bfca00e1822562962f01f1eb0cbc799ad06

  • SHA512

    90db44fc17a79fc6c8ca8a55f8771cc99ffc7dc5d30ba755a0ea610148bca1de72dd4042eb897be2d7a890afc499c1c86474370afc64a8c0446e9128398c5647

  • SSDEEP

    1536:hqlb5gdNXbczIIdC1P+fyZzD/p3Ersze5qxOq5GzfWr3+wXbig0:cdgdNXbczVdpaZP/p3Ersze5qxOq5Gz2

  Score

  9^/10

  discoveryrootkit

  • Contacts a large (210282) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Loads a kernel module

    Loads a Linux kernel module, potentially to achieve persistence

    rootkit
  behavioral1