Extracted

• • Target

    f67bdb0d3d4dde55d7ef7c9ad25a8e068d7ac5ac084fba3b2a9c40d36b13aa48.elf

  • Size

    74KB

  • MD5

    80cc3593d846a47aa9b3b8d61111d13b

  • SHA1

    9222d0efcf42c5f72af22ff5324a17ee0e752115

  • SHA256

    f67bdb0d3d4dde55d7ef7c9ad25a8e068d7ac5ac084fba3b2a9c40d36b13aa48

  • SHA512

    f3285435878e3aa7071ee18de38c3b81230344cff48b85735b2a499e820aaa8daf907e460d4fcd16ab2b4a1d9eabf5daeee92823223d6956efafcda0aa0689f5

  • SSDEEP

    1536:aHy7eP768Dky5FGxZMeYpCVM6+eeLMLMrZyCRBWcXPbbBRhO:RePm8Dix+eYp+M6+TMQZdEcXPbs

  Score

  9^/10

  defense_evasiondiscovery

  • Contacts a large (68155) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Renames itself

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1