Extracted

Extracted

• • Target
    f5c2c9bc096da1d3276ef1836c94ed7b02836f973d8ebd76f8b086705050cc57
  • Size 1KB
  • SHA256 f5c2c9bc096da1d3276ef1836c94ed7b02836f973d8ebd76f8b086705050cc57
  • MD5 30712be45d27df0b1b9c7e971c3d2448
  • SHA1 9390eb293a549aeb54028fdb80a5e22c088c8058
  • SHA512 0309f572fb4e5ea641a92941bdddc8035cf8508aae3609e19ab9b400990a37fb0a7189d35ca8645f030135d02be7310eb6be6857688ad6aaac0aeddeccba1de3
  • TLSH
    T1BD21DD92F4759E333588146DCE6EB5016883056B8E6DE80678C1BC283D3CD26FC99E36
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetdefense_evasiondiscoverymiraibotnet

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai ARM payload

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1behavioral2behavioral3behavioral4