Extracted

Extracted

• • Target
    90506985be05e047f8ab6ac3ec91d6d12eace6be9bf4cb2e32a1a2ea88e2dd7a
  • Size 960B
  • SHA256 90506985be05e047f8ab6ac3ec91d6d12eace6be9bf4cb2e32a1a2ea88e2dd7a
  • MD5 68d33a050ba4c12c882239e8c50dae13
  • SHA1 e162aecd50a66ca1109a62ef773ca369dca5d9d1
  • SHA512 74ae47b91302f6aa805fec1519648596d7826e8366acb8cdb7f13a5fd90e06ce3abf1c8e5036dee53b6ce61c1f57f3b70e8722900f3bf0e657f5925aac559cb4
  • TLSH
    T14A1100C932283DF731CD9D0A34650C15B6E6E1989B730A98588D8C6B94DCB48772AF46
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetmiraidefense_evasiondiscoverymiraiupx

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Deletes itself

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4