General
- Target ok.sh
- Size 1KB
- Sample260608-b689xsft6x
- SHA256 0452e5f363cfc17bf436564ac2cf30e71f7ee30d2d5d66768482c45f8a734d12
Score
10/10
Malware Config
Targets
-
- Target ok.sh
- Size 1KB
- SHA256 0452e5f363cfc17bf436564ac2cf30e71f7ee30d2d5d66768482c45f8a734d12
Score10/10Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
Executes dropped EXE
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
Enumerates active TCP sockets
Gets active TCP sockets from /proc virtual filesystem.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Impair Defenses
1Virtualization/Sandbox Evasion
1System Checks
1