Extracted

Extracted

Extracted

Extracted

• • Target
    ohshit.sh
  • Size 3KB
  • SHA256 ae6528be474ea7e0a07f30100b64b8b0146b673bd0bafbd200490f0b2155e5fc
  • MD5 7246ce795caea2cad9dcc42549721b2c
  • SHA1 e7f8d5fa19cf1f0ceb18f77bbb479b4e2102dbd7
  • SHA512 4ea28aaf001425a9aefefd8b0b7d4b4a71acf5f60618ef3d56a149db539d47f44c40ed2d56c7814de5dff9ffa66cb95b92dc48d5874d3c942d76b3892db9be4a
  • MD5 SHA1 SHA512

  Score

  10^/10

  botnetlzrddefense_evasiondiscoverymiraiupx

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4