Overview

overview

10

Static

static

5

pty

debian-12-armhf

pty

ubuntu-18.04-amd64

10

Resubmissions

12/02/2025, 23:17

250212-291easzkdq 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    pty

  • Size

    43KB

  • Sample

    250212-291easzkdq

  • MD5

    f92f2b6c2e7a924d864906b702f8ee88

  • SHA1

    4f93d33a4da9c35c44fbdab3e819ca10f42ee3d3

  • SHA256

    d6f7fa3acf502d0b6e11197d80d305748999225be6f4eaf28e05a7c94facd432

  • SHA512

    91b20febb2c83ca0be99abf6aae58f0415005e22a3e93247fc7711b900bea6d2380f7c10000f3c8d22e46302acae8af99454b9e873658ace12494efeb043f721

  • SSDEEP

    768:AStrEaF1mquHO0PPCIh+cgTi/7Qv6CKnbcuyD7UYctikLZDg:AQEERt0n6cgTi/7Qv6dnouy8YctikLG

Score
10/10
kaitenbotnetdiscoverylinuxupx

Malware Config

Targets

    • Target

      pty

    • Size

      43KB

    • MD5

      f92f2b6c2e7a924d864906b702f8ee88

    • SHA1

      4f93d33a4da9c35c44fbdab3e819ca10f42ee3d3

    • SHA256

      d6f7fa3acf502d0b6e11197d80d305748999225be6f4eaf28e05a7c94facd432

    • SHA512

      91b20febb2c83ca0be99abf6aae58f0415005e22a3e93247fc7711b900bea6d2380f7c10000f3c8d22e46302acae8af99454b9e873658ace12494efeb043f721

    • SSDEEP

      768:AStrEaF1mquHO0PPCIh+cgTi/7Qv6CKnbcuyD7UYctikLZDg:AQEERt0n6cgTi/7Qv6dnouy8YctikLG

    Score
    10/10
    kaitenbotnetdiscovery

    • Detects Kaiten/Tsunami Payload

    • Kaiten family

      kaiten

    • Kaiten/Tsunami

      Linux-based IoT botnet which is controlled through IRC and normally used to carry out DDoS attacks.

      botnetkaiten
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks