Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

• • Target
    ok.sh
  • Size 1KB
  • SHA256 8c570d090576cf05a6813c28574b2cf210de8054f7fa4cacd67428718348d143
  • MD5 5269188c48af7c2274ab528c8f9ff22d
  • SHA1 f634cd013c1773dc8c151c8f1a5fe8bb185335bf
  • SHA512 fe0941442b6f030d1277ac20867499684372b06e0a5e58b601c5f89f48f43f86a7d760704d0b4023edd38abc3097d5b980ca1844c28ab3c18ba225f858496af0
  • TLSH
    T1AC31899B145206752202C98E73723588A18EA5F72C9FDBD0D85D0EA992983CCF632F5E
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetdefense_evasiondiscoverymiraiantivm

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1behavioral2behavioral3behavioral4