Analysis Overview
score
10/10
SHA256
d3b513cb2eb19aad50a0d070f420a5f372d185ba8a715bdddcf86437c4ce6f5e
Threat Level: Known bad
The file x86.ko was found to be: Known bad.
Malicious Activity Summary
Kaiten family
Identified Kaiten Bot
MITRE ATT&CK
N/A
Analysis: static1
Detonation Overview
Reported
2021-02-23 13:12
Signatures
Identified Kaiten Bot
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Kaiten family
Analysis: behavioral1
Detonation Overview
Submitted
2021-02-23 13:12
Reported
2021-02-23 13:12
Platform
ubuntu-amd64
Max time kernel
0s
Max time network
0s
Command Line
[./x86.ko]
Signatures
N/A
Processes
./x86.ko
[./x86.ko]
Network
| Country | Destination | Domain | Proto |
| N/A | 31.31.72.123:4446 | tcp |
Files
N/A
Analysis: behavioral2
Detonation Overview
Submitted
2021-02-23 13:12
Reported
2021-02-23 13:12
Platform
debian9-mipsel
Command Line
[./x86.ko]
Signatures
N/A
Processes
./x86.ko
[./x86.ko]
Network
N/A
Files
N/A
Analysis: behavioral3
Detonation Overview
Submitted
2021-02-23 13:12
Reported
2021-02-23 13:12
Platform
debian9-mipsbe
Command Line
[./x86.ko]
Signatures
N/A
Processes
./x86.ko
[./x86.ko]
Network
N/A
Files
N/A