Extracted

• • Target
    mips.uhavenobotsxd.elf
  • Size 116KB
  • SHA256 161110ac7b0d4bc481c2b10147554ed12a48fcd4e22cfbd4a0c1d3fc54cc0df3
  • MD5 08f1a4917e75a4f67f673f6c59c14364
  • SHA1 10354d6ccba167ffa72178fa7c11008d297639f8
  • SHA512 fafdc29566d741d4186f20f640366c74018f9593496a3bb2ebc95f77e245b58e78b991ca722947f3de06cfa21c321898316d721008c81ec4288b180871e2ca53
  • SSDEEP 3072:tPm1Oxy7FjnQb82L+HI94/a0YkTV3rpuGwNncP0pdO0V:tPm1Oxy7FjnQb82L+HI5kTtABNcsPOE
  • MD5 SHA1 SHA512 SSDEEP

  Score

  6^/10

  defense_evasiondiscoveryexecutionpersistenceprivilege_escalation

  • Creates/modifies Cron job

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    executionpersistenceprivilege_escalation

  • Creates/modifies environment variables

    Creating/modifying environment variables is a common persistence mechanism.

    persistenceprivilege_escalationdefense_evasion

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery

  • Modifies rc script

    Adding/modifying system rc scripts is a common persistence mechanism.

    persistence

  • Modifies Bash startup script

    persistence
  behavioral1