Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

• • Target
    ea6764f95450a041b2826e7cc7158d917d15218e306a73efd64b1e0cadb9c2f2.sh
  • Size 1KB
  • SHA256 ea6764f95450a041b2826e7cc7158d917d15218e306a73efd64b1e0cadb9c2f2
  • MD5 3f799541b1f22ccceb7f04f9cc49764c
  • SHA1 a507c1af3cadb80edacae0a87bca965b8d1073dc
  • SHA512 e9f8a6c8d5b15b7c270814c2cebf9252b256adb04d14ee9975b9144481dd1597227c47fbbed0a24b333490a8a7ec237c1355054056c14b04832181ea6ec90bb9
  • TLSH
    T1E131958635207AA6422BCF05BA9BE95BC1AD84D9308FF7F9CCE5042CD034548F975B63
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetowaridefense_evasiondiscoverymiraiantivm

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1behavioral2behavioral3behavioral4