Extracted

• • Target
    5c5fcc63e52603f8fc60b41fb28993d4a9a453c1de8d938738d8747e6c90c3f4.bin
  • Size 210KB
  • SHA256 5c5fcc63e52603f8fc60b41fb28993d4a9a453c1de8d938738d8747e6c90c3f4
  • MD5 cf00246fb208fcbd6f8d6916aa61c4a7
  • SHA1 022d910d8d7c3e6fd810bb95b715e1bd6cf3c3f7
  • SHA512 5f409fc6bb9300c4e7401ceccb77b1e42321e3639adb2b320814c25d26ee7de18962e666e360f6c72f00b5f7603cd4bd058bd87c008d90bef7c33e8903f1330a
  • SSDEEP 3072:L52c2lHjhL8z2MjQBU4eyUycQjJMlwtxADkAM3BlYgkqy7:j2RjhLbmQO8T12ZH0w7
  • TLSH
    T11D244B02B5C080FDC4C9C1784EEFA536AA72F49D5235B65B23D4AF222E5DF205F6DA44
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  9^/10

  defense_evasiondiscoveryexectionpersistenceprivilege_escalation

  • Contacts a large (403642) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies the dynamic linker configuration file

    Malware can modify the configuration file of the dynamic linker to preload malicous libraries with every executed process.

    exectionpersistenceprivilege_escalationdefense_evasion

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  behavioral1