Extracted

• • Target
    023782pler.x86_64
  • Size 126KB
  • SHA256 82a66b9d08da7e794c239e1e589d01c798b47a1691d0f53fc12fa5e9bed7cbf6
  • MD5 56dc04137e597db3853ce1cd839f7b84
  • SHA1 d979d22abc1e78018976819eb7dd2db6b292bf1e
  • SHA512 440b061ea230f973727810f3688278334e2a72afa43474fe216f4fa52c9d08feaf3df27eb2557c3b9a4b4a15c633929b43f336e91f2cc55fec54fa91664fcfe5
  • SSDEEP 1536:EKhMoU35nVqA3sUkO47InzMGUCTueLdWAdOrUIW7W3hpN5mQ5NZqDXDMNHxAd:9hCpn3sUoInfUCTue8yOk7MhpN1wDax
  • TLSH
    T13DC34B43B68044FDC449C17453BF7A32D826F86E023A7297A7C4FD263D4DEA1262EB95
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  9^/10

  defense_evasiondiscoveryexecutionpersistenceprivilege_escalation

  • Contacts a large (190229) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Creates/modifies Cron job

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    executionpersistenceprivilege_escalation

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1