General
- Target ohshit.sh
- Size 2KB
- Sample260717-wzh5daes31
- SHA256 4bf2256a533b2444484ddb644619610d0a4c1e126f35d3917f26c72644327b4b
Score
10/10
Malware Config
Extracted
Family
-
mirai
C2
-
injectsbins.duckdns.org
Extracted
Family
-
mirai
C2
-
injectsbins.duckdns.org
-
89.190.156.145
Extracted
Family
-
mirai
C2
-
injectsbins.duckdns.org
-
89.190.156.145
Targets
-
- Target ohshit.sh
- Size 2KB
- SHA256 4bf2256a533b2444484ddb644619610d0a4c1e126f35d3917f26c72644327b4b
Score10/10-
Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Traces itself
Traces itself to prevent debugging attempts
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1