General
- Target newreaxe.sh
- Size 3KB
- Sample260204-adedeaev4b
- SHA256 b4b15ac50d03460b5cc4d2fe64c12bbffa068b1a583ecb4330198fc933a63578
- MD5 086fb30181d1efd4020809a183f6f372
- SHA1 bf960f674e6fbdcfe9a36fb096df1e74b4c9ec2c
- SHA512 445f51454f2f2f9a6d95446bb12bfab4fc59afbc270498e46fde1de8521175cb8600ce61593d47716ad7ea1ff32226e08e03d0e66e7542afe24edde6c7a232e8
- TLSH T1BE5175F6A3C247305EA95637A3789904BC45E1F3B1862E649CFB29BEF84CE047405E97
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
newreaxe.sh
Resource
ubuntu1804-amd64-20260126-en
Behavioral task
behavioral2
Sample
newreaxe.sh
Resource
debian9-armhf-20260126-en
Behavioral task
behavioral3
Sample
newreaxe.sh
Resource
debian9-mipsbe-20260127-en
Behavioral task
behavioral4
Sample
newreaxe.sh
Resource
debian9-mipsel-20260126-en
Malware Config
Targets
-
- Target newreaxe.sh
- Size 3KB
- SHA256 b4b15ac50d03460b5cc4d2fe64c12bbffa068b1a583ecb4330198fc933a63578
- MD5 086fb30181d1efd4020809a183f6f372
- SHA1 bf960f674e6fbdcfe9a36fb096df1e74b4c9ec2c
- SHA512 445f51454f2f2f9a6d95446bb12bfab4fc59afbc270498e46fde1de8521175cb8600ce61593d47716ad7ea1ff32226e08e03d0e66e7542afe24edde6c7a232e8
- TLSH T1BE5175F6A3C247305EA95637A3789904BC45E1F3B1862E649CFB29BEF84CE047405E97
- MD5 SHA1 SHA512 TLSH
-
Mirai family
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Impair Defenses
1Virtualization/Sandbox Evasion
1System Checks
1