General
- Target _fe4df230c3150493480c4bce739ef4c7c1c8aaa35b3f09ccf1b5aacad49aab05.sh
- Size 4KB
- Sample260418-ftvm8ag19z
- SHA256 fe4df230c3150493480c4bce739ef4c7c1c8aaa35b3f09ccf1b5aacad49aab05
Score
10/10
Malware Config
Targets
-
- Target _fe4df230c3150493480c4bce739ef4c7c1c8aaa35b3f09ccf1b5aacad49aab05.sh
- Size 4KB
- SHA256 fe4df230c3150493480c4bce739ef4c7c1c8aaa35b3f09ccf1b5aacad49aab05
Score10/10Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
Contacts a large (148473) amount of remote hosts
This may indicate a network scan to discover remotely running services.
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
Deletes itself
Executes dropped EXE
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
Traces itself
Traces itself to prevent debugging attempts
Enumerates running processes
Discovers information about currently running processes on the system
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Impair Defenses
1Virtualization/Sandbox Evasion
1System Checks
1