General
- Target HMugenXrevamped.sh
- Size 2KB
- Sample260712-k232sahs6v
- SHA256 d94f32c60d0f1372133abe7e627a5b09373546d96828a45a9025a6c3b18022e9
- MD5 15372176d6331ee6cd179987ee4f0e2c
- SHA1 c10b0811a729655de24379b957e381f46e3fb8b3
- SHA512 b87080c317fbb10ae02e0ccb3f2cfa5d94bd2357944e6441ec6ebe1c6cf976ffd5baf12db1f96b488c245663e1e4efc466a483c75562bd17c75d884e494fe1bf
- TLSH T1C051D0CA125626713DEAFE7E75BA8424B380F1CE68C1ED24E9D938E4424CD1C3345663
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
HMugenXrevamped.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
HMugenXrevamped.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
HMugenXrevamped.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
HMugenXrevamped.sh
Resource
debian9-mipsel-20260513-en
Malware Config
Extracted
-
mirai
-
MIRAI
Extracted
-
mirai
-
MIRAI
Extracted
-
mirai
-
MIRAI
Extracted
-
mirai
-
MIRAI
Extracted
-
mirai
-
MIRAI
Extracted
-
mirai
-
MIRAI
Targets
-
- Target HMugenXrevamped.sh
- Size 2KB
- SHA256 d94f32c60d0f1372133abe7e627a5b09373546d96828a45a9025a6c3b18022e9
- MD5 15372176d6331ee6cd179987ee4f0e2c
- SHA1 c10b0811a729655de24379b957e381f46e3fb8b3
- SHA512 b87080c317fbb10ae02e0ccb3f2cfa5d94bd2357944e6441ec6ebe1c6cf976ffd5baf12db1f96b488c245663e1e4efc466a483c75562bd17c75d884e494fe1bf
- TLSH T1C051D0CA125626713DEAFE7E75BA8424B380F1CE68C1ED24E9D938E4424CD1C3345663
- MD5 SHA1 SHA512 TLSH
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Deletes itself
-
Executes dropped EXE
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Impair Defenses
1Virtualization/Sandbox Evasion
1System Checks
1