Analysis Overview
score
10/10
SHA256
07bc044750fd6178634436fc2014424fa7802bf584cd43fc997c85a4b0f99269
Threat Level: Known bad
The file networkd-x86_64 was found to be: Known bad.
Malicious Activity Summary
Identified Kaiten Bot
Kaiten family
Modifies rc script
MITRE ATT&CK
Enterprise Matrix V6
Analysis: static1
Detonation Overview
Reported
2021-10-25 07:32
Signatures
Identified Kaiten Bot
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Kaiten family
Analysis: behavioral1
Detonation Overview
Submitted
2021-10-25 07:32
Reported
2021-10-25 07:34
Platform
ubuntu-amd64
Max time kernel
0s
Max time network
95s
Command Line
[./networkd-x86_64]
Signatures
Modifies rc script
| Description | Indicator | Process | Target |
| /etc/rc.local | /etc/rc.local | ./networkd-x86_64 | N/A |
Processes
./networkd-x86_64
[./networkd-x86_64]
Network
| Country | Destination | Domain | Proto |
| US | 1.1.1.1:53 | changelogs.ubuntu.com | udp |
| US | 1.1.1.1:53 | changelogs.ubuntu.com | udp |
| GB | 91.189.88.185:443 | changelogs.ubuntu.com | tcp |
| CA | 142.44.163.110:6667 | tcp | |
| US | 91.189.91.157:123 | udp | |
| US | 91.189.91.157:123 | udp |
Files
N/A
Analysis: behavioral2
Detonation Overview
Submitted
2021-10-25 07:32
Reported
2021-10-25 07:32
Platform
debian9-mipsel
Command Line
N/A
Signatures
N/A
Processes
N/A
Network
N/A
Files
N/A
Analysis: behavioral3
Detonation Overview
Submitted
2021-10-25 07:32
Reported
2021-10-25 07:32
Platform
debian9-mipsbe
Command Line
N/A
Signatures
N/A
Processes
N/A
Network
N/A
Files
N/A