Extracted

Extracted

Extracted

Extracted

• • Target
    nz.sh
  • Size 2KB
  • SHA256 cac16de59cd6c00305f0d9a8fa5a2adb5e4dac2dde02b78705f126a94546fe85
  • MD5 2368ac3acb08766f54a6bf55852b6cc2
  • SHA1 337fc7a94259d4a117fe2eb35ba9184feb83ec89
  • SHA512 633fce7183e10eb65fc92429101054913f6dc71cc7e3490c9523a1c1aabfb08908e0d55166b31614f25b07bf40ef5e059f59610872420c490479c5bc0cd5e4ef
  • TLSH
    T1AA5188C6108177326DF6DD32BABA88157280D09B64CFAF999DD8BBA984CDD04BC51743
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetdefense_evasiondiscoverymiraiantivm

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1behavioral2behavioral3behavioral4