Extracted

• • Target
    nz.x86.elf
  • Size 105KB
  • SHA256 2cda01fddcb33d3bd866edaf93ee1b1a4466dacd72c8c3142845b92a60b4f832
  • MD5 504c908a5f86c602646e91be3d2da5f1
  • SHA1 ce02a54571d0adec8ef8ce2a5a36d4f8df384f84
  • SHA512 7ac3e549177289fde6e29f0e97de10abce7f023c325e31eb66e6aa9a63e604256aeba023dd2191a56c18702f142a4ba1c801d4df76f9fe1427056ab7bd54e8a8
  • SSDEEP 3072:llzW1xlGxEzmh2XQPScdOpNfeRYw3HELZLa:zzW1WxEzmklcgRw3HELZLa
  • TLSH
    T113B34BC5E283D0F5EC160534203BFB3B9E72E5BB2129DA47D3B49EA2AC56AC1C41579C
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  9^/10

  defense_evasiondiscovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1