Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

• • Target
    1.sh
  • Size 2KB
  • SHA256 f252c6c435904361a76d62a1e678ad7e9ef7ffd491914c1bc0ee160f5d608c5f
  • MD5 663fe2925980146ac0bb9bf348fc6635
  • SHA1 3791a84f4287ab94d22eac29dd2ae9bd296c33e9
  • SHA512 38e6e83a398c6efdd96e63b7d09e82a24ffdb468309d0e0ac05b87161892999337bcce798a54bc833bf8b7387498771d3dd1cfc75c016012572ad479a4cb99b9
  • TLSH
    T1A051D5CA15A106F52C637A6BF9BE4FCC768A90917CE1BD04D7CC34A1929CE5434D0AC3
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetlzrddefense_evasiondiscoverymiraiupxantivm

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4