Extracted

• • Target

    c495ea8405887b87967e89b05394723b752b5038ee299e2b723fbf68e0965f40.elf

  • Size

    56KB

  • MD5

    e9c8b5d68aec4ea6a46d0a3a6409daa8

  • SHA1

    a65beb7883883cb03de73009c823d3ee77d3b90a

  • SHA256

    c495ea8405887b87967e89b05394723b752b5038ee299e2b723fbf68e0965f40

  • SHA512

    2b1d6336a1b585bdced74121ff56395a72497d0f3b67145d1c5e2a37371911c2aec5a256fa94dc7fee488af5d5d4b38175a45909f486a89b5c56fbeaa00a74b5

  • SSDEEP

    768:LbarqQUroM0eDc1CY0zyeAhIkbZyytOoct0XE9Mxazv7mvNsoitvk8mg1GgXPbb3:arqXrVY0mxh1ZJVdaviritvn7XPbbBR

  Score

  9^/10

  defense_evasiondiscovery

  • Contacts a large (78044) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Renames itself

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1