Analysis Overview
score
10/10
SHA256
8e06b953c55b03e4aafd294048d4d32a0b7e611d0dc17ee50f97ffb8e6299444
Threat Level: Known bad
The file 0b8db28378f56457bd00e1797d95ce76 was found to be: Known bad.
Malicious Activity Summary
Identified Kaiten Bot
Kaiten family
MITRE ATT&CK
N/A
Analysis: static1
Detonation Overview
Reported
2021-10-25 08:22
Signatures
Identified Kaiten Bot
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Kaiten family
Analysis: behavioral1
Detonation Overview
Submitted
2021-10-25 08:22
Reported
2021-10-25 08:31
Platform
ubuntu-amd64
Max time kernel
0s
Max time network
42s
Command Line
[./0b8db28378f56457bd00e1797d95ce76]
Signatures
N/A
Processes
./0b8db28378f56457bd00e1797d95ce76
[./0b8db28378f56457bd00e1797d95ce76]
Network
| Country | Destination | Domain | Proto |
| US | 1.1.1.1:53 | changelogs.ubuntu.com | udp |
| US | 1.1.1.1:53 | changelogs.ubuntu.com | udp |
Files
N/A
Analysis: behavioral2
Detonation Overview
Submitted
2021-10-25 08:22
Reported
2021-10-25 08:29
Platform
debian9-mipsel
Max time network
10s
Command Line
N/A
Signatures
N/A
Processes
N/A
Network
| Country | Destination | Domain | Proto |
| US | 1.1.1.1:53 | 2.debian.pool.ntp.org | udp |
| US | 1.1.1.1:53 | 2.debian.pool.ntp.org | udp |
| NL | 82.161.203.30:123 | 2.debian.pool.ntp.org | udp |
Files
N/A
Analysis: behavioral3
Detonation Overview
Submitted
2021-10-25 08:22
Reported
2021-10-25 08:33
Platform
debian9-mipsbe
Max time network
126s
Command Line
N/A
Signatures
N/A
Processes
N/A
Network
| Country | Destination | Domain | Proto |
| US | 1.1.1.1:53 | 2.debian.pool.ntp.org | udp |
| US | 1.1.1.1:53 | 2.debian.pool.ntp.org | udp |
| US | 1.1.1.1:53 | 3.debian.pool.ntp.org | udp |
| CA | 142.44.163.110:6667 | tcp | |
| US | 1.1.1.1:53 | 13E2594B.4551B598.BC317123.IP | udp |
| US | 1.1.1.1:53 | 3.debian.pool.ntp.org | udp |
| NL | 87.233.197.123:123 | 3.debian.pool.ntp.org | udp |
| NL | 87.233.197.123:123 | 3.debian.pool.ntp.org | udp |
| NL | 87.233.197.123:123 | 3.debian.pool.ntp.org | udp |
Files
N/A