General
-
Target
huhu.sh
-
Size
612B
-
Sample
250203-zlplsavkhk
-
MD5
03e98be4a12a9568c29a2af67f0203e6
-
SHA1
4081ba65d287eb000bc8acf85450576502f320c0
-
SHA256
28dc0d138ce29791960807af2751f548f052071ea8bd97978844fd41bd6716fa
-
SHA512
c544a875edc33cd939ff88737d1a04a59181a0fd2febc6742b8e6412640e975c02e4430c5f88ed8217de48ef9187b3a68a7524be71b7191b8fc76c8c30764f6b
Static task
static1
Behavioral task
behavioral1
Sample
huhu.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
huhu.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
huhu.sh
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral4
Sample
huhu.sh
Resource
debian9-mipsel-20240418-en
Malware Config
Extracted
mirai
gay.nguyenletriloc.pro
Targets
-
-
Target
huhu.sh
-
Size
612B
-
MD5
03e98be4a12a9568c29a2af67f0203e6
-
SHA1
4081ba65d287eb000bc8acf85450576502f320c0
-
SHA256
28dc0d138ce29791960807af2751f548f052071ea8bd97978844fd41bd6716fa
-
SHA512
c544a875edc33cd939ff88737d1a04a59181a0fd2febc6742b8e6412640e975c02e4430c5f88ed8217de48ef9187b3a68a7524be71b7191b8fc76c8c30764f6b
Score10/10-
Mirai family
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Deletes itself
-
Executes dropped EXE
-
Traces itself
Traces itself to prevent debugging attempts
-