kaiten | bc61d17def48adc20f861ecd30790859dce642e0922c18131261806e7afb0a66[.]bin

General

Target
bc61d17def48adc20f861ecd30790859dce642e0922c18131261806e7afb0a66.bin
Size 128KB
Sample260506-lcavdaev9t
SHA256 bc61d17def48adc20f861ecd30790859dce642e0922c18131261806e7afb0a66
MD5 d204073821146fdd64a233c1c920c564
SHA1 f6b410ba9d2c3e3931543a0a17789126a1858b87
SHA512 0d3e6b89eb4bac89d0164c5784cc8eb9b3cffb03a4e7b6c7a35450c1e3206f1f118585523d3d21670531dab3dca73dd4e9f2a6be6aa01a138821418583ff1f2c
SSDEEP 3072:Gpa7022NgEMxx+knqMV6TrbXPGDmj4Lq/WoleZ:Gp922NgXx3nqMETrb/GDmj4Lq/WoleZ
TLSH
T11BD3B50BAB61DEB3D85FDD7705AA860110CD945602A96F6F72BCDA2CE74B94F08E3C50
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

botnet kaiten

Family: Kaiten/Tsunami
Linux-based IoT botnet which is controlled through IRC and normally used to carry out DDoS attacks.
botnet kaiten

Detects Kaiten/Tsunami Payload 1 IoCs

resource	yara_rule
sample	family_kaiten2

Detects Kaiten/Tsunami payload 1 IoCs

resource	yara_rule
sample	family_kaiten

bc61d17def48adc20f861ecd30790859dce642e0922c18131261806e7afb0a66.bin

.elf 128KB

SHA256 bc61d17def48adc20f861ecd30790859dce642e0922c18131261806e7afb0a66
MD5 d204073821146fdd64a233c1c920c564
SHA1 f6b410ba9d2c3e3931543a0a17789126a1858b87
SHA512 0d3e6b89eb4bac89d0164c5784cc8eb9b3cffb03a4e7b6c7a35450c1e3206f1f118585523d3d21670531dab3dca73dd4e9f2a6be6aa01a138821418583ff1f2c
SSDEEP 3072:Gpa7022NgEMxx+knqMV6TrbXPGDmj4Lq/WoleZ:Gp922NgXx3nqMETrb/GDmj4Lq/WoleZ
TLSH
T11BD3B50BAB61DEB3D85FDD7705AA860110CD945602A96F6F72BCDA2CE74B94F08E3C50
MD5 SHA1 SHA512 SSDEEP TLSH

linux mipsel