Extracted

Extracted

Extracted

• • Target

    pulse.sh

  • Size

    2KB

  • MD5

    62cb91c4ef22637c8ad25733622c1481

  • SHA1

    a71f4c34d11d81505a2dca56ce349d2e077b30aa

  • SHA256

    99141091152cc9f260fb3bcb4112540e2939ea0d2ef3d0909b705de7656e4ca8

  • SHA512

    2d033be2e64ec61c2f33c570c1cdab01da2dba5778ed65e69301c42858d0e6cd8d6f6faac86fdb14f5587225e3d49842d5401ef2102058b2c55c42e0e088d2e8

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscoveryupxantivm

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Deletes itself

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery

  • Writes file to system bin folder

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4