General
-
Target
8ee9185ac547822d6029ed8cfe19578b9771125077080985e4bc37938daaf030.sh
-
Size
2KB
-
Sample
241217-d8lbzsyre1
-
MD5
27997dbf677f04b714e6bbc6c8731b3a
-
SHA1
cdc488f161e0fdbd400b7fddfa7d3243105ee9a6
-
SHA256
8ee9185ac547822d6029ed8cfe19578b9771125077080985e4bc37938daaf030
-
SHA512
690ddc258ace9cdcb42fc1cd9e2f72fbb0613361a4f5e2fca9fc3a91fc1e61e9d799d52657ec6372093f32493a6f2b58a8a336346d81bc998aaca8cfe3e491b1
Static task
static1
Behavioral task
behavioral1
Sample
8ee9185ac547822d6029ed8cfe19578b9771125077080985e4bc37938daaf030.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
8ee9185ac547822d6029ed8cfe19578b9771125077080985e4bc37938daaf030.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
8ee9185ac547822d6029ed8cfe19578b9771125077080985e4bc37938daaf030.sh
Resource
debian9-mipsbe-20240729-en
Malware Config
Extracted
mirai
LZRD
Extracted
mirai
LZRD
Extracted
mirai
LZRD
Extracted
mirai
LZRD
Extracted
mirai
LZRD
Targets
-
-
Target
8ee9185ac547822d6029ed8cfe19578b9771125077080985e4bc37938daaf030.sh
-
Size
2KB
-
MD5
27997dbf677f04b714e6bbc6c8731b3a
-
SHA1
cdc488f161e0fdbd400b7fddfa7d3243105ee9a6
-
SHA256
8ee9185ac547822d6029ed8cfe19578b9771125077080985e4bc37938daaf030
-
SHA512
690ddc258ace9cdcb42fc1cd9e2f72fbb0613361a4f5e2fca9fc3a91fc1e61e9d799d52657ec6372093f32493a6f2b58a8a336346d81bc998aaca8cfe3e491b1
-
Mirai family
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-
MITRE ATT&CK Enterprise v15
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Impair Defenses
1Virtualization/Sandbox Evasion
1System Checks
1