Extracted

Extracted

• • Target
    pay.sh
  • Size 1KB
  • SHA256 e24dd004f6ce8f29d3d5f8a6202d20cfe824c7696023da5eacf66c5d6a9ca6e0
  • MD5 ccecd6e3ebb4e47184b87971af7f5005
  • SHA1 78745204a649785c5e687b34fac572f93f18e4c3
  • SHA512 6ccd3c43eef2fbe7e66695feb7785c775c30c57f5079e547a98a05b3d9d8150a6b7e9e396d875ad057b83ac41a1f5cb0ee1792d2119ba575058de7e2df28aa1e
  • MD5 SHA1 SHA512

  Score

  10^/10

  botnetowaridefense_evasiondiscoverymiraiantivm

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery
  behavioral1behavioral2behavioral3behavioral4