General

  • Target
    9dd52ca3bd9dd62a4ad017f93c39e0f6855cb9b9d9b01656e6cd71593619dc2a.sh
  • Size 1KB
  • Sample241103-d3grlstema
  • SHA256 9dd52ca3bd9dd62a4ad017f93c39e0f6855cb9b9d9b01656e6cd71593619dc2a
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • mirai

Botnet
  • JOSHO

Extracted

Family
  • mirai

Botnet
  • JOSHO

Extracted

Family
  • mirai

Botnet
  • JOSHO

Targets

    • Target
      9dd52ca3bd9dd62a4ad017f93c39e0f6855cb9b9d9b01656e6cd71593619dc2a.sh
    • Size 1KB
    • SHA256 9dd52ca3bd9dd62a4ad017f93c39e0f6855cb9b9d9b01656e6cd71593619dc2a
    • MD5 SHA1 SHA512
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

    • Executes dropped EXE

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks