Extracted

Extracted

Extracted

Extracted

• • Target
    zte.sh
  • Size 2KB
  • SHA256 ca27628ea9a1ad9bb42bfdf3778151bc1cd0afdd6a244cdce14bdf197e017efb
  • MD5 44165c3b14571277ff73825b55c65e93
  • SHA1 1133cc5aabf2518e0ee10f1083a562a0922f4ae2
  • SHA512 b4789e7cf638363a8e58a0a2e859fc004068ac159ba7edd760557284aa6a4791cdb58dee01ecaafe8066e5c6daad98192ac1e7f6350dde4e64817936f85fae97
  • MD5 SHA1 SHA512

  Score

  10^/10

  botnetsoradefense_evasiondiscoverymiraiupxantivm

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (46905) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4