Overview

overview

10

Static

static

10

Josho.x86

ubuntu-22.04-amd64

7

Resubmissions

13/07/2024, 02:51

240713-dcketasekn10

13/07/2024, 02:49

240713-da59havdnh10

13/07/2024, 02:48

240713-daplravdlh10

20/01/2022, 07:00

220120-hspfxsgfd510

Sharing

Copy URL Twitter E-mail

General

  • Target
    Josho.x86
  • Size 40KB
  • Sample240713-da59havdnh
  • SHA256 50f798eb3aadfd6966a479b74dff730bc03901ca78792f77e570ee5393f45c51
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
miraijosholinux

Malware Config

Extracted

Family

  • mirai

Botnet

  • JOSHO

Targets

    • Target
      Josho.x86
    • Size 40KB
    • SHA256 50f798eb3aadfd6966a479b74dff730bc03901ca78792f77e570ee5393f45c51
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks