Extracted

Extracted

Extracted

• • Target
    micro.sh
  • Size 5KB
  • SHA256 9b5cfe07f51b3ae973b63a154755c4c58edb5267c3e17489d17add17795dea67
  • MD5 2d349809127e4395d706c4e5987efb02
  • SHA1 bac67eee688575a5999c408584119eaff3e2fac5
  • SHA512 783001adc13760c15965c597fa5a4452bb2e8991b3ecdf6c632b2206424c7050a46ae7de0e9700172d6e32639bd277d746ba704ca0a00db19d6ef98ebb27c897
  • SSDEEP 96:GZTJCIwlHPRei19pmxLImzpWCDgQ19JZNxh9WqYEt8UUkLJvE:G6TNZnqca9xX9WqFtR7+
  • TLSH
    T10DC191D2F931C531709D187A9B89B260BEC7582F0A147C14B88F7E386F2866CA1BC675
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  botnetlzrddefense_evasiondiscoveryexecutionmiraipersistenceprivilege_escalationupx

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Creates/modifies Cron job

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    executionpersistenceprivilege_escalation

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Modifies init.d

    Adds/modifies system service, likely for persistence.

    persistence

  • Modifies rc script

    Adding/modifying system rc scripts is a common persistence mechanism.

    persistence

  • Modifies systemd

    Adds/ modifies systemd service files. Likely to achieve persistence.

    persistenceprivilege_escalation

  • Writes file to system bin folder

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4