Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

• • Target
    ok.sh
  • Size 1KB
  • SHA256 f6393dcbcfee887795b9d00f1337dc795bd42a9b9920ea1bb0a297243e9144f7
  • MD5 5d8d90a9142aa3f4d43fb02c0ce9c3a6
  • SHA1 483403fe3e3eae0beb48c324ae22d97cf9bd65ba
  • SHA512 de55236395e0c10e55180a24558ea9f20f9107360eb2d9e26aed9c51f6d5733485aeeceb9582a4a97f41f48561c74a4d3e009538b1de49c929056879d24939b3
  • TLSH
    T1D431A1DF40645F301042C98EB3B2344D799DA1FB29AFD7C1D9580DA9928878CF252B5D
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  botnetdefense_evasiondiscoverymiraiantivm

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

    discovery

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1behavioral2behavioral3behavioral4