Extracted

Extracted

Extracted

Extracted

• • Target

    hnap.sh

  • Size

    2KB

  • MD5

    7f7f5f81539a7abbf579e8720f527c86

  • SHA1

    2323a22a0199a048f7db8c237c90e1da39f66264

  • SHA256

    2b7d3d1e1c6589f9c02b479e04bd9af07c899f53306d762c564570f6aadf6424

  • SHA512

    8db3f52ef6de158fc29c02850c14a9514d1fc42ac27b0a2d4ee6587f3861f3d0b683d04789344712d19faeea7de64547096ab43f211a026fe21a5ff6da19cefb

  Score

  10^/10

  miraisorabotnetdefense_evasiondiscoveryupxantivm

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (46628) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4