Extracted

• • Target

    e516c2a08a07ce8407f47f02181ab05d2c4a8fd7ac5c9e3a423db4c390a14867.elf

  • Size

    68KB

  • MD5

    54f7d591c06590713bf71fe59e9e49aa

  • SHA1

    f14561a46d3987904225ab149d6993f44f71e464

  • SHA256

    e516c2a08a07ce8407f47f02181ab05d2c4a8fd7ac5c9e3a423db4c390a14867

  • SHA512

    6aa1592dfc7a874afe7920dda00230a50db50859f8765b0c3da4e93e5c85c2fbfc2de0660dd7aee4487a1731a780ff665b61f87dd3d174226ea9948065a8bfb8

  • SSDEEP

    1536:a9nHmozeWGAKmC37/4h49HhMtc7u0eqw9p9lKNiAaOj3lXPa:TozsAS7/4C9BMtc7u0eqxXaOTlXPa

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Renames itself

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1