kaiten | botirc[.]mpsl[.]elf | Triage

Sharing

General

Target

botirc.mpsl.elf
Size

88KB
MD5

8056d097e1340b7c4f8e34890f4dcb79
SHA1

e61a7766e15df7ee5e1788eae07272faf2d45e94
SHA256

7bfd44d5db818732f710809434fa4c3c2dbc001c27016710edba58e047283f1f
SHA512

d9500d174f9d88659cfaec99ec9e72dfec1cc0be3ba7393810f620882efbe9172b21d57a17ad1b35d1ad6c6e10c0039ce6f4467b5ded4a7f9a46ffc5829821a6
SSDEEP

1536:x4nytjFd/5cC3DrogMureFPo5ZCPHETctykW5Fbp2EMrVd9:xEKrKPo5bLHp2EMrVD

Score

10^/10

kaiten

Malware Config

Signatures

Detects Kaiten/Tsunami Payload 1 IoCs

Processes:

resource	yara_rule
sample	family_kaiten2

Kaiten family
kaiten

Files

botirc.mpsl.elf
.elf linux mipsel