Extracted

• • Target
    wget_gpon.sh
  • Size 960B
  • SHA256 8af2a43024cbee3b82015d4dc64247500bbda19a3f09807277f32a5fbacde702
  • MD5 c7f991fc931c39d82f0dd9cfd9407dd3
  • SHA1 23b0f8eeb603aa7a231b128c40dd4d68fb273da1
  • SHA512 fcc29250a9d714234e6129fadac9b17c65427c600f3b85a272eb69e646517a536e58a50d6c6d6d60e3db2ddd0630a54b2b47b209c03297ea1f644360e082442e
  • TLSH
    T1DC110AC9321839E731CE8E0A34610C11BADAE094DBB20AA4588D5C6B94DCB5A771BF4A
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  defense_evasiondiscoveryupxbotnetmiraimirai

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Deletes itself

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4