Extracted

Extracted

• • Target
    payload.sh
  • Size 1KB
  • SHA256 d23bf440668ecbaf669359d6143db30af13573b271845e389c00c826b93a337f
  • MD5 7a06ca9bdc7198a74de25ee78f8a4826
  • SHA1 4f78453ab761c36785c26c2fe7eb9f4527c34ce5
  • SHA512 185ce985540fbbc56daa9c838dfcd452552921cdefde93fa006ca1e45a34805e2717ff96792215119d604f041b2db6b42fe17ae136851e9c50297040f5b4c189
  • TLSH
    T14421DD93F1758E323688106DCE6DB9416487057B8E6DEC0678D1BC283D3CC26BC99A36
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  defense_evasiondiscoverybotnetsoramirai

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (48435) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1behavioral2behavioral3behavioral4