Extracted

Extracted

• • Target
    s
  • Size 2KB
  • SHA256 e84ad3e9937a39e39b732432caea51739809b99db62c9f3b7510f0164c4d259d
  • MD5 1a244e6537a316a16a1600f83211ff00
  • SHA1 03c952c3a4e526461c3dfa203278ea4fc6105a0f
  • SHA512 2fb3636a9db2f31b13636db915d30b54a7f87aa963cd3432a2db8dd1c64ee736b4d1d02932976d81f7ef02081b14f527b24b8bc83e951162c692b92916aebd15
  • TLSH
    T14E517CC517830F703CA3DDE763BA9D04368CAEFE64C26E15A5E938E8464ED84B180B53
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetdefense_evasiondiscoverymiraiantivm

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery
  behavioral1behavioral2behavioral3behavioral4