Extracted

Extracted

Extracted

Extracted

• • Target

    goahead.sh

  • Size

    2KB

  • MD5

    2f155262711b3b5d224e0c947ff75981

  • SHA1

    27318f291143b656c7d945d6f41d90e23d114562

  • SHA256

    51e04d56632e0465248dbfdd5145d27c3b9e66c4a38f787c52ddf3a193ec2c91

  • SHA512

    92d179867cb380e4948d702d0d9c90d7c6c288e0bb8ac8e97b512f848108e5b97b10fc02c38b5c8b7a57b446d53c1b46710ddd68e0d9ae9854366efd0e8d9d44

  Score

  10^/10

  miraisorabotnetdefense_evasiondiscoveryupxantivm

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (47125) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4