Extracted

Extracted

Extracted

Extracted

Extracted

• • Target
    cat.sh
  • Size 1KB
  • SHA256 b4537262f18d9b0b667aced73206f5699a0e3d197ba5ed6a165cb56708532f4e
  • MD5 b0bf3f637845dec3e0771ef25382c4e5
  • SHA1 4c9f9684016c90f7421ca5c895f41a5f9ec85f9d
  • SHA512 8950b31a8145bb7abb6684ec8b24b0ad991c26391778801e253c363770a29b53ea1cc138cc1e746ca0bb5327f5458a883320520348e2784cbca1e56338157398
  • TLSH
    T17C21F487F412F1B1A9B5047CAB8BB19112472427A620ED0C344D3D605F7BCA8FDB12D5
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetmiraidefense_evasiondiscoverymiraiupx

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Deletes itself

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4