Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

• • Target
    cd7258fc7962f1fc3d62649201953288c69983cbcdd5f5c7b2ad76bc05d95ed9
  • Size 1KB
  • SHA256 cd7258fc7962f1fc3d62649201953288c69983cbcdd5f5c7b2ad76bc05d95ed9
  • MD5 df3283e6c2f3af5ab1946b77fe845426
  • SHA1 675ff7b0e9cbfe8c8dc09648d445637a7cee8b52
  • SHA512 5d965f0a9dd5b7ab9c349ae5132792a1085827492f534c6d67b3f5bbf5497e9cf2928836ed471b29d313772f565dd144f3b6cffc32284b3ccc583e6d8dc15caf
  • TLSH
    T1B73143DA15095A381606CEDD73B3318CB00E96FB1D9BC7A4984C4FEE92885CC7566F91
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetdefense_evasiondiscoverymiraiantivm

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1behavioral2behavioral3behavioral4