Extracted

Extracted

Extracted

Extracted

• • Target
    realtek.sh
  • Size 2KB
  • SHA256 42eac83614fa4e4ac209a7f8e683715aa42cd68fcf6fbb9305d15986ea95590d
  • MD5 32f126d16456bea2b22f46deb9ad000c
  • SHA1 455a4d93e75edbff397c716a2651370b507b434b
  • SHA512 c5b96ce99d48f38462b7d1eda66761d299c516f798807f6e471876832652c3221be0ac304e4b3c2f2d6a42ce6fcf90e6bcd5f7e10ba1701e8866eea05adbf8d2
  • TLSH
    T12F51A3D433160AB67FF29D63B5F64A147284A4E25AC26E45D0FDB8FD259CF0C24A06E3
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetsoradefense_evasiondiscoverymiraiupxantivm

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai ARM payload

  • Mirai Renesas payload

  • Contacts a large (34833) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4