Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

• • Target

    bash.sh

  • Size

    2KB

  • MD5

    2d7ab9da08f0022d323186c76ebfc718

  • SHA1

    c2ccbf8a8aa97324efc1794ab5e82ecc89950fa8

  • SHA256

    aff538d6b5b0c58f881f11de50f67baed41ccbdca3d4ba73b94c9300f343d900

  • SHA512

    0d4505ab4ac7dcb3abec7b67386800663f2d172d5e77a26158992dc459b3e5e55ead6b5182c7685d4501452dd817aa94022e275bf4c2146f4cbfa05a696d47e5

  Score

  10^/10

  miraiowaribotnetdefense_evasiondiscoveryantivm

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1behavioral2behavioral3behavioral4