Extracted

Extracted

Extracted

• • Target

    hidden.sh

  • Size

    2KB

  • MD5

    a049f979d06c20ea98e850d006bf968c

  • SHA1

    d7e23d66238515d48e598902ad77f42f7b17534e

  • SHA256

    8474a2543a52186b91b0dd66b48447b43b8e1bb4d2c2c713f8b9972ab4d0ab81

  • SHA512

    7a80739e324c30ad138b2d69f4d145603c6badc84344bca3083e528d8ef443b4b4c8fca400071fbf56c24bff7082e858f5e72c2bca7d3ca4ec4aecf5ca31b7d0

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscoveryupxantivm

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Deletes itself

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery

  • Writes file to system bin folder

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4