Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

• • Target
    _6013bfd0f7deef080af337f32389ac34ef1e2a38549a3ce61661c853cf0e6e43.sh
  • Size 3KB
  • SHA256 6013bfd0f7deef080af337f32389ac34ef1e2a38549a3ce61661c853cf0e6e43
  • MD5 3dd4e146f01611d7729b127685ca7f92
  • SHA1 761d13abe7278b6ae5671be02487a71c0fea9996
  • SHA512 ce1a79a5dec281480e9cc27ab7dff9d90f2b4167292a464aa81255a0a17601f968cf3838487d127ff71da374f700f9081a2c5f7b735696241a333959cad12ba3
  • TLSH
    T1E07176CB012307F5BDA2A46F73B5C43CB180DACA7981CE26E4ED34B919CDD8965C16A7
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetlzrddefense_evasiondiscoverymiraiupxantivm

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4