Extracted

• • Target
    zero.x86.elf
  • Size 148KB
  • SHA256 008f69a06fb446a1c2606b8af15bab9f6cdf5aa0d467f36d56f4245e64c1f437
  • MD5 974ec2170312613740e43586733eb98e
  • SHA1 0d4532df9d07f58776b6cac370f3458c643a690a
  • SHA512 ed1870ade63d2850e7748e07674b9e3530be2ed738ec2157438d578d7702cf8da90ac01156dc322b254642f46687348e0968e9b5066682989554c9348f848122
  • SSDEEP 3072:HL+K3Eoyt+1+F6n+1Rmgv1cz1FiqYCap4lijk0KmODr/cVyS/9fk:HL+K3Eoyt+1+F6ncRmgv1SaDO0NcO
  • TLSH
    T174E33907B8C084FDC099C1B48BBEB13AD972B56D123DB29B2B88AF271D4DE604F2D555
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  9^/10

  defense_evasiondiscovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1