Extracted

• • Target
    263a069384f70e280acb5b0aef5c7e780e6377f7a61ea7ba4e77cb4c8dcea7e5
  • Size 65KB
  • SHA256 263a069384f70e280acb5b0aef5c7e780e6377f7a61ea7ba4e77cb4c8dcea7e5
  • MD5 6b487c2e9a353cf754455891959b9ece
  • SHA1 851399878b9f763a5061d0dd17132af787f1a2eb
  • SHA512 feaa7708e0749d48b773e964af9a30e18e361732d3937324975038a4ac399dc997313e5436e7cbb3612032c0ca0da7ec19ec058e974f4334b0b22706f7f1bb89
  • SSDEEP 1536:LdEhCQZ+SIEX2up0WkGFZUv4cYaNcTG6AvpzL8B9PLVq1xqBU:4CQQSv2uu3GzgaTDAvpzLKu+U
  • TLSH
    T1636302313181CAE34F701DB58BE28852775E7FB75AEB16E84228B978D32221576E44CA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  botnetdefense_evasiondiscoverymirai

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Detects suspicious XORed keyword - Mozilla/5.0

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1