Extracted

• • Target
    MMaaRRiiOisecTanee.arm7.elf
  • Size 159KB
  • SHA256 12f1d677a4f4dd24a1f21cb02d9dfd0eb5cdc58c69024efe3eb66ebd1fa3562a
  • MD5 8316bec51a88000b6bb7e520271e1b66
  • SHA1 6cef4b1801346487c9794c9831a0a3e156c37762
  • SHA512 81125a187025577d84fba10b0673b79a575efe89585e7828f9b7235c0c1307a0548d0365394b649d6288b3defbdceae4e23f98ce894baf2fd9c01675650714e6
  • SSDEEP 3072:3PFsu+bVZFpfnHpKhjiYq5YYujSrwGy/tBF1EDfX6OxM/9a8cdAr:f2u+bVZ/nHwMgSrwGy/HF0fKQM/9aldQ
  • TLSH
    T157F35D86EA408A13C4C61777FAAF014D3322E759E3DB73068D185FB43F86A5E4E67606
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  9^/10

  credential_accessdefense_evasiondiscovery

  • Contacts a large (60620) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Reads process memory

    Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.

    credential_access
  behavioral1