General
-
Target
bins.sh
-
Size
2KB
-
Sample
241206-qjdxtsyqet
-
MD5
bc08b99cc7c6bc0f035c108a16f77e9d
-
SHA1
f8dd49443b086d72bbf8626c2366b9084851ecca
-
SHA256
3f6b55f3d9803d4e865e0fdbcd26fdedf734723240be51ada16811ab58ec7639
-
SHA512
1a3b3920ddf0b87bbbbc89c531440bb0f1838f4c8094068cd2ce2149c46848d522156f0f3e4a6c7f71a4ac94cd99f27c585b3cbb49bf482d196a761c92903ea8
Static task
static1
Behavioral task
behavioral1
Sample
bins.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
bins.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral3
Sample
bins.sh
Resource
debian9-mipsbe-20240611-en
Malware Config
Extracted
mirai
LZRD
Extracted
mirai
LZRD
Extracted
mirai
LZRD
Extracted
mirai
LZRD
Extracted
mirai
LZRD
Targets
-
-
Target
bins.sh
-
Size
2KB
-
MD5
bc08b99cc7c6bc0f035c108a16f77e9d
-
SHA1
f8dd49443b086d72bbf8626c2366b9084851ecca
-
SHA256
3f6b55f3d9803d4e865e0fdbcd26fdedf734723240be51ada16811ab58ec7639
-
SHA512
1a3b3920ddf0b87bbbbc89c531440bb0f1838f4c8094068cd2ce2149c46848d522156f0f3e4a6c7f71a4ac94cd99f27c585b3cbb49bf482d196a761c92903ea8
-
Mirai family
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-
MITRE ATT&CK Enterprise v15
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Impair Defenses
1Virtualization/Sandbox Evasion
1System Checks
1