Extracted

Extracted

Extracted

Extracted

• • Target

    ohshit.sh

  • Size

    2KB

  • MD5

    c6fded176e564c4f582523ba198be43d

  • SHA1

    e10b19d975f65e398b0a928f5e03b0f83aeadd65

  • SHA256

    eb177007a8b2654ecbbfb91246abae4052bea475b54af2fe2c9e4058ba79ac82

  • SHA512

    e0b9fed97a3b4b035dfdd5b1c3ee36f2571949abbd081dc02fdd24b911cb5ff4aa79036f263be7ca6e388bfb9fdfd41f33f2ab567bd17b5dd164072d82333b96

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscoveryupxantivm

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4