Extracted

Extracted

Extracted

Extracted

Extracted

• • Target

    21592f72b78a52cbb31ba42577f0f5316ac4869de1281ad2f7d81f5d970d807c.sh

  • Size

    2KB

  • MD5

    4e3d079076dbd0da4d36211e359e7c90

  • SHA1

    c78fc85b3cb983b5f6da054337221b744ffce6f2

  • SHA256

    21592f72b78a52cbb31ba42577f0f5316ac4869de1281ad2f7d81f5d970d807c

  • SHA512

    85a322f9c2d9cae35021d896ca50f254b49354d2819f77396a97a9d41a544d8662ec0cdd38475884b9bab02f9247c9ed637fa9caa26d4669b8f5e32a739ec78b

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscoveryupxantivm

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4