Extracted

Extracted

Extracted

Extracted

• • Target

    ohshit.sh

  • Size

    3KB

  • MD5

    49ccb38dd7e10864370e97b7037c2880

  • SHA1

    e0db7b2cf8aecb8664fd87164f638103418eb9ab

  • SHA256

    f58a06a7be85427f150ab29567daa86227c274acef7657fcb12a74ef64d6b2cb

  • SHA512

    cde0c823211fb1a86e88644c9daad843ecb11c49d91256c943d2baef250a2243cd9bcc4c7b68bde3139b441b124503b235bf12583c8c9d22e61a14fe0c59806e

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscoveryupxantivm

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4