General
- Target realtek.sh
- Size 2KB
- Sample250411-nv79psyjs3
- SHA256 b41bb8d5584c75918e33f0f11bf96b7e264b9909f3681ffde8d9cfb1063af7a8
- MD5 780e7d3bc90d26e160f040485278335f
- SHA1 d10ae56199826544aa3378b159a44aa902dfced7
- SHA512 f6d53ea41b4c107428973c9949b505f53dc11fe2f1261c5692bae3f38bab87df31a190f2e32dda630c437190e010ab890adb9f758f8d5948217365c471dd29fc
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
realtek.sh
Resource
ubuntu1804-amd64-20240508-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
realtek.sh
Resource
debian9-armhf-20250410-en
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
realtek.sh
Resource
debian9-mipsbe-20240418-en
10 signatures
150 seconds
Behavioral task
behavioral4
Sample
realtek.sh
Resource
debian9-mipsel-20250410-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
C2
-
main.jojoasmr.xyz
Targets
-
- Target realtek.sh
- Size 2KB
- SHA256 b41bb8d5584c75918e33f0f11bf96b7e264b9909f3681ffde8d9cfb1063af7a8
- MD5 780e7d3bc90d26e160f040485278335f
- SHA1 d10ae56199826544aa3378b159a44aa902dfced7
- SHA512 f6d53ea41b4c107428973c9949b505f53dc11fe2f1261c5692bae3f38bab87df31a190f2e32dda630c437190e010ab890adb9f758f8d5948217365c471dd29fc
- MD5 SHA1 SHA512
Score10/10-
Mirai family
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Deletes itself
-
Executes dropped EXE
-
Traces itself
Traces itself to prevent debugging attempts
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1