Extracted

Extracted

Extracted

• • Target
    chunk.sh
  • Size 6KB
  • SHA256 648211a99f52a97aaded94265a928d70342b7eb95144c5e494d362c51493cbd0
  • MD5 e563a88491709c2b7e00b5302c837aee
  • SHA1 25170d46a49073608e420bc67730195fc8ecb5f3
  • SHA512 77b102c9beb5b7141caeab15999b331ad6a4cd5a4f1edfe123f4ab46950ea707a244437673677f95e12548cb0ae8f897680cab6b00e7d8f489cf8d9225b7d3a3
  • SSDEEP 96:FuDx7R/wlHPRei19pmxLImzpWCDgQ19JZNxh9WCeti+Bxt8LejU6LJvE:YYNZnqca9xX9WCeNtrj7+
  • TLSH
    T13BD1C6D2F931C130749D187A9B99B250BEC7142F0A147C14B49F7D786F2C66CA2BCA76
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  botnetlzrddefense_evasiondiscoveryexecutionmiraipersistenceprivilege_escalationupx

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Creates/modifies Cron job

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    executionpersistenceprivilege_escalation

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Modifies init.d

    Adds/modifies system service, likely for persistence.

    persistence

  • Modifies rc script

    Adding/modifying system rc scripts is a common persistence mechanism.

    persistence

  • Modifies systemd

    Adds/ modifies systemd service files. Likely to achieve persistence.

    persistenceprivilege_escalation

  • Writes file to system bin folder

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4