Extracted

Extracted

Extracted

• • Target
    022cfc39fb54a53e4012b7cab8f4b0a3752419f14281e00f236faf16ba5853ce.sh
  • Size 2KB
  • SHA256 022cfc39fb54a53e4012b7cab8f4b0a3752419f14281e00f236faf16ba5853ce
  • MD5 4af44a00eaf904dbd1024031b0b86034
  • SHA1 677f1d1dfe639182134db45555076dfb6d920bea
  • SHA512 d06bdee2da0b1655c099140417a8808044d8d2458d208bada02adc633a41e4e7c40872778b768693ad3168337d11030a713ced07051c48fba8790892968d63d2
  • TLSH
    T15B51C9DAE22187FAEC65C916B2FA750CF4B140D6A4CE3E7B55EE39F4589DE04B300642
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetdefense_evasiondiscoverymiraiupxantivm

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4