Extracted

• • Target
    04dde07efaec2e504ef093bbd1592c651881ce52089543e0f24e2a529a1e01ef.elf
  • Size 120KB
  • SHA256 0b11a7495fa0ad2da9f7e78039be4cbe5fd00345d67298e93f4b2bc368fcf352
  • MD5 218e5dba8923d8373496dd1075cf4fb3
  • SHA1 75b018e9aea0829539d1c4b7fb876ac7c9ab387d
  • SHA512 0a8c10e04504b14c5b2215236b5bc695d628331735c44adcd137fb29cce16e9f93dce310b64c1e315fb7089e6ada3f8126a2d0b7556436175afed79c3ebcfdc8
  • SSDEEP 1536:BbcFti0/w+OXZ/JvRt7QlrbMrQjPx+JZvLtKqiCyPwZUqAMnkCfuFnoFSXH:BKv/w+4trhdiCAwAD2KH
  • TLSH
    T187C3E70ABB254EFBEC6FDD3746A91706358C640621A93F367A74D818F54B60B0AE3C74
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  9^/10

  defense_evasiondiscovery

  • Contacts a large (92677) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Deletes itself

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1