Extracted

Extracted

Extracted

• • Target

    GPON.sh

  • Size

    1KB

  • MD5

    5e6b993735e7a9bcafc44479de9ad361

  • SHA1

    646f766fcc739d4e370626ad0cd732955b85bff1

  • SHA256

    cbf92e8a0ac875219802f4e5ffb7177afb36d915c8041337883f4fd1e9497d8a

  • SHA512

    7e344749f5df14e6f8aa8ddb8f2b38438e886b019afcfa3020a505eb9f660e84741fffad3dc31e031b6245ce205737b1f08efc79bf466e51c6d46fcf3dbcaa35

  Score

  10^/10

  miraisorabotnetdefense_evasiondiscoveryantivm

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (510875) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  behavioral1behavioral2behavioral3behavioral4