Extracted

Extracted

Extracted

Extracted

• • Target
    yarn.sh
  • Size 2KB
  • SHA256 6174f7d79e48448d38278254374a2d30a7c2880f7d055b8a8484c2fe00cb277d
  • MD5 a0a281cf5e8d88c5b62943d0b80c51ef
  • SHA1 f0c39ecb90f915f32fb1aefba3d2895f474db536
  • SHA512 a49a5b9421312a3840f20f4dc33d224fa0052f66933263c976f0e1bf3f6c21864cb6e70e7fdea244bd1db462fc1673e39d4b637fa9c809cf485511d3296496e8
  • MD5 SHA1 SHA512

  Score

  10^/10

  botnetsoradefense_evasiondiscoverymiraiupxantivm

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Mirai family

    mirai

  • Contacts a large (45497) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2behavioral3behavioral4