Extracted

• • Target
    becb09b3bdc89012d8332651976512f971234839ecb2d385e17988a67f2d9049.sh
  • Size 923B
  • SHA256 becb09b3bdc89012d8332651976512f971234839ecb2d385e17988a67f2d9049
  • MD5 5419b553750dc94cb55eecefce2e1950
  • SHA1 bf1c8a80bcecfe13f81279a0392031d661e736ef
  • SHA512 fb4d326c895be35fef16ae64708323567f6cbdd66267cb61e5de47e36289189a0295a6fcc2dd8482ab143e022d79ef846da37215735cc84931aafd01b7404d6e
  • MD5 SHA1 SHA512

  Score

  10^/10

  miraibotnetbotnetdefense_evasiondiscoveryexecutionpersistenceprivilege_escalatio

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Renames itself

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Creates/modifies Cron job

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    executionpersistenceprivilege_escalatio
  behavioral1behavioral2behavioral3behavioral4