Extracted

Extracted

Extracted

Extracted

• • Target
    nz.sh
  • Size 2KB
  • SHA256 09e484fc3dcd85a4c8b709277d0b17d2c5620a20812fea43f1c78916781cb319
  • MD5 5a91240d211ae1dbc7a913c5125595b9
  • SHA1 20b86f825dfee13d7d47fb90b0e61666738cb07e
  • SHA512 56a6feae83350b498191d52d463989564e58e07257c334cce4acbf8c415f7247a321954fca8dec79e4b7b4c021aee7fd9aec312f4d29c70ea5bf11db756a8218
  • TLSH
    T18941F7E511925B759E69C9BB72BA450D35C2D18169CFDECBDFD834F8088CE1D7009B42
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetmiraidefense_evasiondiscoverymiraiupxantivm

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Deletes itself

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4