kaiten | d1aec788c7751a1314dd471cf96bbbc05ca939d44b33ec149080afaacd369c02[.]elf

General

Target
d1aec788c7751a1314dd471cf96bbbc05ca939d44b33ec149080afaacd369c02.elf
Size 125KB
Sample260809-grnbssha64
SHA256 d1aec788c7751a1314dd471cf96bbbc05ca939d44b33ec149080afaacd369c02
MD5 2a956fb8ed254fd65f23db8ea38d7320
SHA1 d9b70420891416f1ce6ec732a072cb786a93196d
SHA512 13462245de759963188f92926c5dc0494e5129b3b888545bd056397a0260d01ad7654fe0c3845c60be1c9a1966fd5f44db59a958bc60db8f0a606a0dfe161ed5
SSDEEP 3072:TbsM7a929XTAsdyaHHwIhX4KiSjZflMgWyPu:B7a6X8sYa1wSjUgWyPu
TLSH
T1BFC30A46A541DF12D5C221BAFF5E465937136F78D3EE32029D24BFA0374A8FB0A3A116
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

botnet kaiten

Family: Kaiten,Tsunami
Linux-based IoT botnet which is controlled through IRC and normally used to carry out DDoS attacks.
botnet kaiten

Detects Kaiten/Tsunami Payload 1 IoCs

resource	yara_rule
sample	family_kaiten_v4

d1aec788c7751a1314dd471cf96bbbc05ca939d44b33ec149080afaacd369c02.elf

.elf 125KB

SHA256 d1aec788c7751a1314dd471cf96bbbc05ca939d44b33ec149080afaacd369c02
MD5 2a956fb8ed254fd65f23db8ea38d7320
SHA1 d9b70420891416f1ce6ec732a072cb786a93196d
SHA512 13462245de759963188f92926c5dc0494e5129b3b888545bd056397a0260d01ad7654fe0c3845c60be1c9a1966fd5f44db59a958bc60db8f0a606a0dfe161ed5
SSDEEP 3072:TbsM7a929XTAsdyaHHwIhX4KiSjZflMgWyPu:B7a6X8sYa1wSjUgWyPu
TLSH
T1BFC30A46A541DF12D5C221BAFF5E465937136F78D3EE32029D24BFA0374A8FB0A3A116
MD5 SHA1 SHA512 SSDEEP TLSH

linux arm