Extracted

Extracted

Extracted

• • Target
    wawan.sh
  • Size 2KB
  • SHA256 7e7660fa660009fc95dd10651842635bb480f43a50d4c543c9db86c894027a48
  • MD5 d626e72ea627ddfeffe2e62efbc81fc4
  • SHA1 897b56af1b535d6cb31ab06b2d153b7ad9ea94ac
  • SHA512 a39a6ec3cf89ef8dc5d73d68e426bed47610ac962dd315c5989caa1c4f739154ecf3f505165227b9a941e0eaadba584f0a68faee0bdbb4a27e03029552f705df
  • TLSH
    T1D3513CD15F2080622F3C48D571FCC351085BDBAE2721296EBC2568393ECF955E3BBAA1
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetdefense_evasiondiscoveryexecutionladvixmiraiinfectorpersistenceprivilege_escalationtrojanupx

  • Family: Ladvix

    Ladvix is a linux trojan and file infector first seen in 2022.

    trojaninfectorladvix

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Creates/modifies Cron job

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    executionpersistenceprivilege_escalation

  • Modifies rc script

    Adding/modifying system rc scripts is a common persistence mechanism.

    persistence

  • Writes file to system bin folder

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4