Extracted

• • Target
    f56343d2afffab61cfb5eca2a2b47a133a1f936843eba0d061f0ddaaf89d26ce
  • Size 77KB
  • SHA256 f56343d2afffab61cfb5eca2a2b47a133a1f936843eba0d061f0ddaaf89d26ce
  • MD5 80077107ca71e9fe5aa10be23e2d2b0a
  • SHA1 eeb3b5c046c7aaa37389684d14e914eb7139c269
  • SHA512 50b8026e3b863816df54424a5c127a79b5031500a1565be356ad665ea7b3ae4ccc7657853cce173dc242900ceb9e5b79a2de8a2109b953b0b03acc376dde0423
  • SSDEEP 1536:9QC/3umbutmUl9i1WIo27ozS9Lo/b2+gJymeMlitPWmM18HR5D4WRouZbqeqVr5g:9Qu3umbutmUl9lIlkeJoT2hJymeMlite
  • TLSH
    T19B733AC9B5C3F8F4EC040A392177EF319E77E13BA129DD8BE7D96623A941342941229D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  9^/10

  credential_accessdefense_evasiondiscovery

  • Contacts a large (60794) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Reads process memory

    Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.

    credential_access
  behavioral1