Extracted

Extracted

Extracted

• • Target

    cc70ab717dc971f59aa668420b8f678f7bff8dd06719112c3ad4e6b2a5e30170.sh

  • Size

    2KB

  • MD5

    3353f8a64ea508bd5c60d37ceb969029

  • SHA1

    76e89e8ff766848e4fedb227cb08e6edb05ce819

  • SHA256

    cc70ab717dc971f59aa668420b8f678f7bff8dd06719112c3ad4e6b2a5e30170

  • SHA512

    1bbc390f95f9313f77c52927f55ada829e8290d5978e27b0d0a284236ac5fedcbc7ac9426573488edcfdb37b7b61ee7f35f31d5761c2887689856d32666b2207

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscoveryantivm

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Deletes itself

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery

  • Writes file to system bin folder

  behavioral1behavioral2behavioral3behavioral4