Extracted

Extracted

Extracted

• • Target

    zte.sh

  • Size

    2KB

  • MD5

    4f730f218d22e79270dd5af7df77d761

  • SHA1

    59cfd55256c70085ab0110c9680057f16401e235

  • SHA256

    dec3b2b8179fc9d0d49388a87f6d487d2647e9b191da96ca3872a4f421c30e31

  • SHA512

    77f5348af4e4b4f549109be0e8fdc37ad0791ff4e262fb5c811d3508de9c21d54131ba09a6703269baff71b863a25c67a53441e9aefa130e289dc9fc6eccb4d6

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscoveryupxantivm

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Deletes itself

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery

  • Writes file to system bin folder

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4