Analysis Overview
score
10/10
SHA256
d47cbe048c52480e5ab1c0531448a756eed695a798d6dee57f67793382b30358
Threat Level: Known bad
The file d47cbe048c52480e5ab1c0531448a756eed695a798d6dee57f67793382b30358 was found to be: Known bad.
Malicious Activity Summary
Identified Kaiten Bot
Kaiten family
Modifies rc script
MITRE ATT&CK
Enterprise Matrix V6
Analysis: static1
Detonation Overview
Reported
2022-02-17 21:48
Signatures
Identified Kaiten Bot
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Kaiten family
Analysis: behavioral1
Detonation Overview
Submitted
2022-02-17 21:48
Reported
2022-02-17 21:50
Platform
debian9-mipsel-en-20211208
Max time kernel
6151s
Max time network
153s
Command Line
[./d47cbe048c52480e5ab1c0531448a756eed695a798d6dee57f67793382b30358]
Signatures
Modifies rc script
| Description | Indicator | Process | Target |
| /etc/rc.d/rc.local | /etc/rc.d/rc.local | ./d47cbe048c52480e5ab1c0531448a756eed695a798d6dee57f67793382b30358 | N/A |
Processes
./d47cbe048c52480e5ab1c0531448a756eed695a798d6dee57f67793382b30358
[./d47cbe048c52480e5ab1c0531448a756eed695a798d6dee57f67793382b30358]
Network
| Country | Destination | Domain | Proto |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp | |
| NL | 185.61.137.109:40669 | tcp |
Files
N/A