Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

• • Target
    cat.sh
  • Size 1KB
  • SHA256 1a28663d0e7b7e29d47fb3a77c100b4225bce827275a8d54458f0e504f678467
  • MD5 3973a0710eb7e08f766234891727a979
  • SHA1 00a4d230d3fea742e48512e841de3fcc5f2e0241
  • SHA512 b3d90fb7c9ec9b0bca9c98248df5205c8223c233b126d294503e1a96225f7b7950bc7e5f7f2b79b13b65b3ba48842a8ba7db63e8b758af8766da44448b61fd09
  • TLSH
    T1243123CE50E4A95785EDDE00F073C94DA006B5C520FA2E1EEEC929A1DCD9941B36CB66
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetcredential_accessdefense_evasiondiscoverymiraiupx

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai Motorola payload

  • Mirai Renesas payload

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Traces itself

    Traces itself to prevent debugging attempts

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Reads process memory

    Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.

    credential_access

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4