Extracted

• • Target
    MMaaRRiiOisecTanee.arm7.elf
  • Size 159KB
  • SHA256 0e50f54b54e3e179fb5530db13375a7a6bc297438511d374c680f32834934aa3
  • MD5 96cf54958f2a2755a17bc7739d538f34
  • SHA1 6f72f214fbb4e14452014c0772143ca07def21c5
  • SHA512 6315a9476161586def762088f94f0ddd4d059cb0f18bd18bf004bfe206a41c8bb412621fdb53c6b2a4ed3559b6e1e2b4f509317e22e68aa21dc0c8457268309a
  • SSDEEP 3072:AgjZZu+bVzHprqHh3bsLOYq5IndIFrwGy/p4FugofWOVM/9aQIhAr:Dru+bVzNqHlvrFrwGy/OFyfWkM/9aVhQ
  • TLSH
    T170F35D86EA408A13C4C61777FAAF014D3322E759E3DB73068D185FB43F86A5E4E67606
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  9^/10

  credential_accessdefense_evasiondiscovery

  • Contacts a large (61131) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Reads process memory

    Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.

    credential_access
  behavioral1