General

  • Target
    GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh
  • Size 2KB
  • Sample250118-1l3zvawphp
  • SHA256 1c2b832a264649154e6f7755c395b0295902d7da7ab6a2c07518173253ab4b25
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • mirai

Botnet
  • MIRAI

Extracted

Family
  • mirai

Botnet
  • MIRAI

Extracted

Family
  • mirai

Botnet
  • MIRAI

Extracted

Family
  • mirai

Botnet
  • MIRAI

Extracted

Family
  • mirai

Botnet
  • MIRAI

Extracted

Family
  • mirai

Botnet
  • MIRAI

Targets

    • Target
      GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh
    • Size 2KB
    • SHA256 1c2b832a264649154e6f7755c395b0295902d7da7ab6a2c07518173253ab4b25
    • MD5 SHA1 SHA512
    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

    • Deletes itself

    • Executes dropped EXE

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks