Extracted

• • Target

    d3f5617b6aab657f9bd8793811a42b887bb0cfa20d0e30ef7a121db5674e3a77.elf

  • Size

    50KB

  • MD5

    67996e3a070f8402917aa1e91f008ee8

  • SHA1

    3e5333d8dd828a5dbc4fd51dae4a545bc14e85ae

  • SHA256

    d3f5617b6aab657f9bd8793811a42b887bb0cfa20d0e30ef7a121db5674e3a77

  • SHA512

    26d264d52aca45132869b4e9429fd13b589a1d41338b93e10a1cf80683574280da8711bcf0c141ef4ebf7da1f5fb120778e1ac6c84152a4a9a7bcdce90218707

  • SSDEEP

    768:x3wPkDLbRaeUj7HcPYBBKoQ6pYTKppoVNm8rr+/hSbbgOT1xzlNs5glh4sg:N+knbRsBKzKYupQm8v+56MOLYq

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Renames itself

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1