Extracted

Extracted

Extracted

• • Target

    pulse.sh

  • Size

    2KB

  • MD5

    2d3c16a2a4a95fbea8e3701f1a87f196

  • SHA1

    3f58b26babc849466241b5370aa6550967075c78

  • SHA256

    ef3eaa8e117b7d554783cc7ec3e87b9000b253514c68d2af01b9228136eda3ca

  • SHA512

    499835274884d0063f666b2b5e708de9428d5ce5c6682a7847bba97c6058eafb6168e10ba896d53f76ebba4d16515d262ca8a9ef7ad81bdfbca145247793e102

  Score

  10^/10

  miraibotnetbotnetdefense_evasiondiscoveryupxantivm

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (102462) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4