Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

• • Target
    ok.sh
  • Size 1KB
  • SHA256 dee75b1f9f5bf18f8ae1d2a1d2cf1c825f2b11110ce0169892b00923675c116c
  • MD5 00a7c96d7616b228caaa5dd0183065e1
  • SHA1 abc5cffdf666b56e18be8245eacbf4fdf8dc7528
  • SHA512 d56f05b57c8ecd5610b7104b94973679b8c7179b6d31b9521ee2e802f1e3eb48e2e70d95bf2604325ab55d901f6d95f3b9b9bf85873db69a475ffa59a1654de7
  • TLSH
    T14431729A50241A321103DA9E3362350CB15DA5FB2CDFD7D8CD481EEA82887CDF2A1F59
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetdefense_evasiondiscoverymiraiantivm

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1behavioral2behavioral3behavioral4