Overview

overview

10

Static

static

1

no.sh

ubuntu-18.04-amd64

10

no.sh

debian-9-armhf

10

no.sh

debian-9-mips

10

no.sh

debian-9-mipsel

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    no.sh

  • Size

    2KB

  • Sample

    240722-aja8yasapc

  • MD5

    0cfdd05ea2bb11d74b3ce3b95fc29421

  • SHA1

    665cc6ba414b286da9c1a41a618d843275fa53cc

  • SHA256

    95af6dd9da15577bfd171daebb2f404a52df04d38a4bcad538ef4b79a6435cae

  • SHA512

    8a0baf4405ad2462a4a735d4a2a84d8d0b9ef10b72261716e0afb985f280d93aac4f5e8e40a6da0d330264813a077f3a4216df862821022d2f9c3ea90147c120

Score
10/10
miraimiraiantivmbotnetlinux

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

C2

whois.hopto.org

Extracted

Family

mirai

Botnet

MIRAI

C2

whois.hopto.org

Extracted

Family

mirai

Botnet

MIRAI

C2

whois.hopto.org

Targets

    • Target

      no.sh

    • Size

      2KB

    • MD5

      0cfdd05ea2bb11d74b3ce3b95fc29421

    • SHA1

      665cc6ba414b286da9c1a41a618d843275fa53cc

    • SHA256

      95af6dd9da15577bfd171daebb2f404a52df04d38a4bcad538ef4b79a6435cae

    • SHA512

      8a0baf4405ad2462a4a735d4a2a84d8d0b9ef10b72261716e0afb985f280d93aac4f5e8e40a6da0d330264813a077f3a4216df862821022d2f9c3ea90147c120

    Score
    10/10
    miraimiraibotnetantivm

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Executes dropped EXE

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks