Extracted

• • Target
    loligang.mips.elf
  • Size 120KB
  • SHA256 c100f4f7ef38a8c5de6da8ab284bd7fc0baac9653d4212c498cbd2966d64e2db
  • MD5 8d522433422d67d91874500c5cd09a31
  • SHA1 7ebddb47869155521e3ac68d78f0873c39ec258d
  • SHA512 7b506d0688b6151178e5b0bfed290de725c16a9cdf7e71337b206e7189b1888ea01bc2da23597967c2cd094c787be4596e0b801d9bf5584cbd2b80fa0b504deb
  • SSDEEP 1536:1Q/zv7/st8DBnS46GTe2f1230XVbvileXmBmLMlARyZLfVrzeN8iGHmkLC6bM51:S/D3dvileWBaMARyZLfJFHm8s51
  • TLSH
    T159C3D71E6E229F7CFBA8C63447B38F21A658339623E1D545D26CD6011E7034E741FBA9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  9^/10

  defense_evasiondiscovery

  • Contacts a large (24564) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1