General

  • Target

    huhu.sh

  • Size

    612B

  • Sample

    250203-zlplsavkhk

  • MD5

    03e98be4a12a9568c29a2af67f0203e6

  • SHA1

    4081ba65d287eb000bc8acf85450576502f320c0

  • SHA256

    28dc0d138ce29791960807af2751f548f052071ea8bd97978844fd41bd6716fa

  • SHA512

    c544a875edc33cd939ff88737d1a04a59181a0fd2febc6742b8e6412640e975c02e4430c5f88ed8217de48ef9187b3a68a7524be71b7191b8fc76c8c30764f6b

Malware Config

Extracted

Family

mirai

C2

gay.nguyenletriloc.pro

Targets

    • Target

      huhu.sh

    • Size

      612B

    • MD5

      03e98be4a12a9568c29a2af67f0203e6

    • SHA1

      4081ba65d287eb000bc8acf85450576502f320c0

    • SHA256

      28dc0d138ce29791960807af2751f548f052071ea8bd97978844fd41bd6716fa

    • SHA512

      c544a875edc33cd939ff88737d1a04a59181a0fd2febc6742b8e6412640e975c02e4430c5f88ed8217de48ef9187b3a68a7524be71b7191b8fc76c8c30764f6b

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

    • Deletes itself

    • Executes dropped EXE

    • Traces itself

      Traces itself to prevent debugging attempts

MITRE ATT&CK Enterprise v15

Tasks