Extracted

Extracted

Extracted

Extracted

• • Target

    gpon443.sh

  • Size

    2KB

  • MD5

    6744cd6370fc8925d67a9d5de8b6d122

  • SHA1

    3e0fd96625b156bd1049739c814695e1bfc81574

  • SHA256

    d7a78f3ff9cd3bbb0d640e593767bf0be713023537743676d4297e0f5aa5f87e

  • SHA512

    591fdbf6b925a1aa1578248487ed70092601cb1753c12ee87316d4344401a6dde5026df6f26e7e1ab67dac84d1bb091f697e54343e93dd86ca14d3dcee2482c8

  Score

  10^/10

  miraisorabotnetdefense_evasiondiscoveryupxantivm

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (46171) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4