Extracted

Extracted

Extracted

Extracted

Extracted

• • Target
    42836b114e7bcd8cdc52461c940530536c97c24303f8c824d4031d3b9cdbc5a0.sh
  • Size 2KB
  • SHA256 42836b114e7bcd8cdc52461c940530536c97c24303f8c824d4031d3b9cdbc5a0
  • MD5 c7b29d1b75100c258c0ee61a7a942e80
  • SHA1 0c1e287240fe0db5fc9bf6c8bb1ddf24bba0baf3
  • SHA512 2d6fd6b73743bde5faaa4a8b25ded5177593c98e9a3cde65ae6f48b3a072add0e41f896541a07d3a0fa38a8c8530f8acaebfbf8cd98787f275508165125b7f71
  • TLSH
    T1F3518CC581145D341DAF6B37E6F6513C30819063A8EAEF85D9E7BAE88B4EC9C7940723
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetlzrddefense_evasiondiscoverymiraiupxantivm

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4