Extracted

• • Target

    bins.sh

  • Size

    1KB

  • MD5

    9d68e98f65d13deb163ddff8775e6790

  • SHA1

    f7d6f96e95f276c566c78d7d43231946f377e8fd

  • SHA256

    297d3e7c3baa68bca45a6802e9d1b7ff08a7125a60f409b4980403d2e64de79d

  • SHA512

    241b96ef4a8f162432f02791b13003aa31b9deb7d1c52976c7c4a4967c7611cf79976f9ecffb196b56fcf519e64b6b8dcc63819362a65d6a52ae17ee733117d5

  Score

  10^/10

  gafgytbotnetdefense_evasiondiscovery

  • Detected Gafgyt variant

  • Gafgyt family

    gafgyt

  • Gafgyt/Bashlite

    IoT botnet with numerous variants first seen in 2014.

    botnetgafgyt

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Writes DNS configuration

    Writes data to DNS resolver config file.

  behavioral1behavioral2behavioral3behavioral4