Extracted

Extracted

Extracted

• • Target
    kla.sh
  • Size 1KB
  • SHA256 2d0553d5ec80a052c3d670eb42154835dd4e107d7f914b63299c05362d98a74e
  • MD5 c7cf72ba78b521f7259299b950f6e70d
  • SHA1 efcdde1e6da3d211d9b2746456761c2d7bfefe60
  • SHA512 0908dcb0cfb455321953f399892171188d463e113519c46dca7665084efca6a0e4c8db9fe13107d59a779ce9ad67ce35224c7d086d5d88dafe3a2fe23ed61c71
  • TLSH
    T1803195C623212D712DE6DF1E75A88424B282B1E2DDC36AC594D93DFD9CCEF087842A53
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetmiraidefense_evasiondiscoverymiraiupxantivm

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Deletes itself

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4