Analysis Overview
score
10/10
SHA256
55f01ff2bb744a125fdab31ba37951077af56bc188bb0176a45b2f3fbc65c6a0
Threat Level: Known bad
The file 55f01ff2bb744a125fdab31ba37951077af56bc188bb0176a45b2f3fbc65c6a0 was found to be: Known bad.
Malicious Activity Summary
Identified Kaiten Bot
Kaiten family
Modifies hosts file
Writes DNS configuration
MITRE ATT&CK
Analysis: static1
Detonation Overview
Reported
2022-04-20 15:06
Signatures
Identified Kaiten Bot
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Kaiten family
Analysis: behavioral1
Detonation Overview
Submitted
2022-04-20 15:06
Reported
2022-04-20 15:48
Platform
debian9-mipsel-en-20211208
Max time kernel
0s
Max time network
133s
Command Line
[./55f01ff2bb744a125fdab31ba37951077af56bc188bb0176a45b2f3fbc65c6a0]
Signatures
Modifies hosts file
| Description | Indicator | Process | Target |
| /etc/hosts | /etc/hosts | N/A | N/A |
Writes DNS configuration
| Description | Indicator | Process | Target |
| /etc/resolv.conf | /etc/resolv.conf | N/A | N/A |
Processes
./55f01ff2bb744a125fdab31ba37951077af56bc188bb0176a45b2f3fbc65c6a0
[./55f01ff2bb744a125fdab31ba37951077af56bc188bb0176a45b2f3fbc65c6a0]
Network
| Country | Destination | Domain | Proto |
| US | 1.1.1.1:53 | irc.choopa.net | udp |
| US | 209.222.22.22:6667 | irc.choopa.net | tcp |
Files
N/A