Extracted

Extracted

Extracted

• • Target
    nz.sh
  • Size 2KB
  • SHA256 93d5d6729dc0f5a37aef6763ad24ec250df1a7c91600441920ae30fabc9af85c
  • MD5 18bf589984f54050820822de81f86087
  • SHA1 2cd6fe46b488e67563c98ee1e81609252249fa50
  • SHA512 3e4f6db94fb7156d480e87fa5da415edefd7e0b20b144449e54b92af7bc997fcf366e407888d57d766156204cc67bc7ed71aec053ef5f8f5d60e1358ebc604ac
  • TLSH
    T17F517EC7110507312E66DDE6BBBB486931D0E1AE64C7FE6BA8D8B8E8428DD087C42653
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetdefense_evasiondiscoverymiraiantivm

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1behavioral2behavioral3behavioral4