Overview

overview

10

Static

static

ljc.sh

windows10-2004-x64

3

ljc.sh

macos-10.15-amd64

10

ljc.sh

ubuntu-18.04-amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ljc.sh

  • Size

    1KB

  • Sample

    230124-ylteasfb2x

  • MD5

    238af6fec3323e31fd809fda87165fc7

  • SHA1

    8a694450e42ca8cd294715229799c411fbf2ecd8

  • SHA256

    d03288877f3732a5cc88416b38cc59d3e12ee1367d0ae514f148a49658a0c232

  • SHA512

    5760fceec83cf3b18f3fbd3df3b5fb6ec484143355fcef7ea3f2ad17b6da6dc77bab4686100775cba07542ea3527ed1ae1f4850e264a703736a653c062c2ef4a

Score
10/10
miraibotnetdiscoverylinuxmacos

Malware Config

Extracted

Family

mirai

C2

185.btc-f2pool.top

Extracted

Family

mirai

C2

185.btc-f2pool.top

Extracted

Family

mirai

C2

185.btc-f2pool.top

Extracted

Family

mirai

C2

185.btc-f2pool.top

Extracted

Family

mirai

C2

185.btc-f2pool.top

Targets

    • Target

      ljc.sh

    • Size

      1KB

    • MD5

      238af6fec3323e31fd809fda87165fc7

    • SHA1

      8a694450e42ca8cd294715229799c411fbf2ecd8

    • SHA256

      d03288877f3732a5cc88416b38cc59d3e12ee1367d0ae514f148a49658a0c232

    • SHA512

      5760fceec83cf3b18f3fbd3df3b5fb6ec484143355fcef7ea3f2ad17b6da6dc77bab4686100775cba07542ea3527ed1ae1f4850e264a703736a653c062c2ef4a

    Score
    10/10
    miraibotnetdiscovery

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

1
T1046

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks