Extracted

Extracted

Extracted

Extracted

• • Target
    thinkphp.sh
  • Size 2KB
  • SHA256 73afe3529e8a831644fce44424c008a7df4174e8cb9670310541987469b0d2d8
  • MD5 a80a770d970f199a2f3398eebb167d18
  • SHA1 9b9430b6884623d7b716e12af2fc94feca39f0d2
  • SHA512 17b290206feaa2ac46e9f566f5c514b0b63a4188ea4a4e4e7e4fe9ad3fc965a0b5ba8b952fcc112ac6acbdf5564fe4f9b064337816a9b7b0620a6fae8f2a65c9
  • TLSH
    T1A651FD871595E3B01CF1D91A35B949087095F1C3BAEF1E4BABE43AA8884DE8473C5BC3
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetmiraidefense_evasiondiscoverymiraiupxantivm

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai ARM payload

  • Mirai Motorola payload

  • Mirai Renesas payload

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Deletes itself

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4