Extracted

Extracted

Extracted

Extracted

Extracted

• • Target

    938aa70dc932c5e04d7b26226591bfa9c18180421958613bac79c72fbcd3145c.sh

  • Size

    2KB

  • MD5

    7e24e03c8d6c1bafbc85a32aa065853f

  • SHA1

    1399f7b9e79afa7fb910eb61f8e7d10b36c64310

  • SHA256

    938aa70dc932c5e04d7b26226591bfa9c18180421958613bac79c72fbcd3145c

  • SHA512

    0975c2aaae90e309467a37d38bdb48790c56c7efdfe9ad82a69c93d8cd2d25f4eee4e741222b1d455e04913e69380d52f81efe6c1b025e9ef1fd872a0fcac521

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscoveryupxantivm

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4