Extracted

• • Target
    MMaaRRiiOisecTanee.arm7.elf
  • Size 159KB
  • SHA256 f3f1ffbf525d56837674ce6ef0ab44fd8364f5aeba5f8c0ad8457ef638a2bb1a
  • MD5 3acd8c88e4ffd833d7e51942151972a6
  • SHA1 36f819255fdb722071a953229cc64ac57737d850
  • SHA512 3383501b551d28d33bbeded71f7195705d5aaafa9bb25d3cbadb354ac9ed7bde44ae8e205d73900d0ba7e569d50e163dcd557eaea30d8e75d6630821e655d435
  • SSDEEP 3072:4gjZZu+bVzHprqHh3bsLOYq5IvEIdrwGy/RAFPegVfWOVM/9SQohAr:bru+bVzNqHlvydrwGy/+FTfWkM/9SlhQ
  • TLSH
    T16BF35D86EA408A13C4C61777FAAF014D3322E759E3DB73068D185FB43F86A5E4E67606
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  9^/10

  credential_accessdefense_evasiondiscovery

  • Contacts a large (60810) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Reads process memory

    Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.

    credential_access
  behavioral1