Extracted

• • Target
    0acd4d8c5d2f0841ec63671ca9ccf2419b9fc641c4802509a1fc9550f443695e
  • Size 47KB
  • SHA256 0acd4d8c5d2f0841ec63671ca9ccf2419b9fc641c4802509a1fc9550f443695e
  • MD5 c94c022e25bef2255cf391e555f2c011
  • SHA1 b1c84a7289270d6a225750d95adab279d510ea53
  • SHA512 3b787ed8e0a14a99320c9bd2a75bc96078cc91e57610e22ad0be13f6c1e59df146d278950927dc6aa6f4aac0a3d80fd34ea63bced3da156b7cd77700f938fdbe
  • SSDEEP 768:QAph4sbGTQb4Q3wuU8NatEbTKHxxHoqPJHjZCAVDt9QwTBoYA343DW/Gy:3QQb4QAP8NNSHjoqnCApvDbA3dGy
  • TLSH
    T14623E19CEDC4A589CF5F0CF7919542781C11664227DAAB94D7238AA4BF28927386F0F8
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  botnetdefense_evasiondiscoverymirai

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Detects suspicious XORed keyword - Mozilla/5.0

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1