Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

• • Target
    ok.sh
  • Size 1KB
  • SHA256 bab6ccd1bd6cd243c42f0f03c959184117d03a73ca01476bdd6055f15458f2d4
  • MD5 4e7d0ddfc752fca76d41ec0c7ae2be8d
  • SHA1 7761925a4630b91ce74927ac360e5d4b463ac2f4
  • SHA512 3f9084a3c1b8d14f90ccd6f72c258fca876ad2e4656b0c3f292e37d917a3a9218dc6f498a0f6c1e073cadb31717aeeaace5acf7097c685e7f171836fca015a2d
  • TLSH
    T1513145DE055056325113CA4E73A3358CA9CDE1F7299FC7F4D9084EE982946CCF262F59
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetdefense_evasiondiscoverymiraiantivm

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1behavioral2behavioral3behavioral4