General
- Target hidden.sh
- Size 2KB
- Sample250411-nv79psyjs5
- SHA256 b601f0f14716738354c1e8aa079f833f52cef1a0f2dfb4f002b798549cea006d
- MD5 6e3e70875b174ea5cece61700737f8bc
- SHA1 d268681f9ca261641153eff72bd5dec3df57a6dc
- SHA512 60f7332df0f5d97f503fbe515008ae96edff3fb23ca48159a3cf2572c410a6e40a034e110d93bfcedc89d74b8503f7b3dcd76318ce0214cb4eee841e02c15722
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
hidden.sh
Resource
ubuntu1804-amd64-20250410-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
hidden.sh
Resource
debian9-armhf-20240418-en
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
hidden.sh
Resource
debian9-mipsbe-20250410-en
10 signatures
150 seconds
Behavioral task
behavioral4
Sample
hidden.sh
Resource
debian9-mipsel-20240729-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
C2
-
main.jojoasmr.xyz
Targets
-
- Target hidden.sh
- Size 2KB
- SHA256 b601f0f14716738354c1e8aa079f833f52cef1a0f2dfb4f002b798549cea006d
- MD5 6e3e70875b174ea5cece61700737f8bc
- SHA1 d268681f9ca261641153eff72bd5dec3df57a6dc
- SHA512 60f7332df0f5d97f503fbe515008ae96edff3fb23ca48159a3cf2572c410a6e40a034e110d93bfcedc89d74b8503f7b3dcd76318ce0214cb4eee841e02c15722
- MD5 SHA1 SHA512
Score10/10-
Mirai family
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Deletes itself
-
Executes dropped EXE
-
Traces itself
Traces itself to prevent debugging attempts
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1