Extracted

Extracted

Extracted

• • Target

    yarn.sh

  • Size

    2KB

  • MD5

    0d74c987d40e397f7690d21876b9f5e2

  • SHA1

    a00ece51f9e94a279848dd51fefef7c6b80a7ccb

  • SHA256

    09f6d758d458edfc4f98ee9c90881da8ccb395fb39fd2f89373e52b444b4a596

  • SHA512

    f671e087b10d7294d835bb6f70b4b90fe82173d7812712629fac7ecf1194884289c8393dc6f029fdb2f413b4608d32725938d4e0890e745261291b005b030cc1

  Score

  10^/10

  miraiunstablebotnetdefense_evasiondiscoveryupxantivm

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Deletes itself

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery

  • Writes file to system bin folder

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4