Extracted

• • Target
    b7b758260de24c6185910560b44cb7825783294399f6b7cebc6cd11948728dcf.bin
  • Size 93KB
  • SHA256 b7b758260de24c6185910560b44cb7825783294399f6b7cebc6cd11948728dcf
  • MD5 14404843199c582e5402c937213bb14e
  • SHA1 996aaf396b815539f7a87986bf06b6f053103d57
  • SHA512 acfeca0300a5072017bd8c185b8abb235f031f581171269da56414aa7851d0a75e97c1231554f1a36633b0766a59eb8738cc78e0390ab0619798343b442f2dfa
  • SSDEEP 1536:2NnWPtU3dOR9uX07vdUV0LfY7DRKtlHXosWIkXJTEdTE7UvgtSqAdalx/AiCQfjf:RPtU3dOaX0pUVwYXctVWIYTEdTE7agtb
  • MD5 SHA1 SHA512 SSDEEP

  Score

  9^/10

  defense_evasiondiscovery

  • Contacts a large (33391) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Renames itself

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1