Extracted

• • Target
    kwari.mpsl.elf
  • Size 117KB
  • SHA256 d41d5685a57d498900a664ba40fde9cbfaec97a836bd3585ececfc93772784c5
  • MD5 4a925c1f4d422d9491016794a5cdca4d
  • SHA1 c6e2581e23a75071ab9bc01df62507a39fc9bd1e
  • SHA512 9b9edc8570366279c5a401caa35c9b61eb593580bcc1f5ef4e41b634ecfc2946c82b8d757eab538a89c358186c38340bfffd13b222625d3e871d698c53bb1b56
  • SSDEEP 3072:618xlxArvWZWvW3W7W+WfpX5yywjWgT+1SY/l:G6nmWZWvW3W7W+WfpX5pWQ1Hl
  • MD5 SHA1 SHA512 SSDEEP

  Score

  9^/10

  defense_evasiondiscovery

  • Contacts a large (331747) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  behavioral1