Extracted

Extracted

• • Target
    561b9327e87addc615ec1c93342af9227faf8bc904218ad513cf86b8ff26a467
  • Size 525B
  • SHA256 561b9327e87addc615ec1c93342af9227faf8bc904218ad513cf86b8ff26a467
  • MD5 3aa30e57e1960d842003b21aa3f0f9a0
  • SHA1 cf5d10e03415e981fc60942d76c0ba8ff1904ad4
  • SHA512 08297f801e8feeccfba90ff222594cea1f7452195897a1a864cbf1e75c148be13ee7a1619cd06e2eb0093649f1527b385785cfbc9eaa13ef9337008f035adc4a
  • TLSH
    T10EF0C9EEF8768C397F088D7FB0A732E47040A45280D52D94338AF9F7855CC49FA1A222
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetomnidefense_evasiondiscoveryexecutionmiraipersistenceprivilege_escalationupxmicrosoftphishingproduct:outlook

  • Detected microsoft outlook phishing page

    Potential Outlook account scam

    phishingmicrosoftproduct:outlook

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (1393534) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Deletes itself

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Creates/modifies Cron job

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    executionpersistenceprivilege_escalation

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery

  • Modifies rc script

    Adding/modifying system rc scripts is a common persistence mechanism.

    persistence

  • Write file to user bin folder

    persistence

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4