Extracted

Extracted

Extracted

Extracted

Extracted

• • Target
    5f519816e7624548ebccddeb9e60a84ec0609a336409d5dc518259a9bbfe2f5a
  • Size 1KB
  • SHA256 5f519816e7624548ebccddeb9e60a84ec0609a336409d5dc518259a9bbfe2f5a
  • MD5 f44cabc4f9445783856ceb202cfafd77
  • SHA1 6a9135ceaf82517590ab9a574d78ed12e025755e
  • SHA512 9e8ec1b787b50320f8798335aea1094157244e2462de8ee014423181fe40578623fb705985fdf34c229f22099e734c87c491202336e7a9dbb7237dc94254dff7
  • TLSH
    T19D31A7C952D164366CFEF9267BBA8448B180989798C93D6CD8E839E899CDF0C7044747
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetowaridefense_evasiondiscoverymiraiantivm

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai ARM payload

  • Mirai Motorola payload

  • Mirai Renesas payload

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery
  behavioral1behavioral2behavioral3behavioral4