Overview

overview

10

Static

static

1

731e88ae5f...kes118

ubuntu-20.04-amd64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    731e88ae5f22ba01372a3b0cc5adccdf_JaffaCakes118
  • Size 2.7MB
  • Sample240401-revkfsff6t
  • SHA256 751014e0154d219dea8c2e999714c32fd98f817782588cd7af355d2488eb1c80
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
kaitenbotnetlinux

Malware Config

Targets

    • Target
      731e88ae5f22ba01372a3b0cc5adccdf_JaffaCakes118
    • Size 2.7MB
    • SHA256 751014e0154d219dea8c2e999714c32fd98f817782588cd7af355d2488eb1c80
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    kaitenbotnet

    • Detects Kaiten/Tsunami Payload

    • Detects Kaiten/Tsunami payload

    • Kaiten/Tsunami

      Linux-based IoT botnet which is controlled through IRC and normally used to carry out DDoS attacks.

      botnetkaiten

    • Runs EXE from memory

      Runs an executable from memory, likely to minimize footprint

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks