Extracted

Extracted

• • Target
    nz.sh
  • Size 1KB
  • SHA256 e096bf51ba4bb7e4791166f7a35befb5a74b9ed2794f80ef7b913c6f16f7bd41
  • MD5 6ffc505835934d2c7022661649b9d24d
  • SHA1 641fa1adf2b663635bad2337806faeb3f8134698
  • SHA512 2a933a39df7ab30a7e358a1b73b0c86b66392d49b09769828d9c15a77a9c92851cb248f7825de72f949974ffa19e669aea19ed2fde60aefc8cdd2fa9d769f72c
  • TLSH
    T1E12165C7110503301EA5D9E6BBBB445970D0D1DE54C3BF6BA8D8B8E9818EE187C42553
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetdefense_evasiondiscoverymiraiantivm

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1behavioral2behavioral3behavioral4