Extracted

Extracted

Extracted

Extracted

• • Target

    zte.sh

  • Size

    2KB

  • MD5

    0f11adde4bd27799d5d8a88dda6dd214

  • SHA1

    2f5ed76bdb88221956b62fe5ebc31fa0bd9abae7

  • SHA256

    9f23d5a2fd461ea6cf66de255a4a2a24f8d2a1493c5d0fca55d0d75f86d41893

  • SHA512

    aac960972fe0283b446cb2bc99f1fca3504776ebe0bab8921c15de172ca4a4881569219c2010b11464b824491ca9e026f3123f6d9affa26bab88e7b1e9ee3dd0

  Score

  10^/10

  miraisorabotnetdefense_evasiondiscoveryupxantivm

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (43664) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4