General
- Target pty10
- Size 782KB
- Sample260820-gzmega1cjh
- SHA256 bfab96ba9cc070006e1cd2b793ff14b896ac468002284253eeb36a514b532205
Score
10/10
Malware Config
Targets
-
- Target pty10
- Size 782KB
- SHA256 bfab96ba9cc070006e1cd2b793ff14b896ac468002284253eeb36a514b532205
Score10/10-
Detects Kaiten/Tsunami Payload
-
Family: Kaiten,Tsunami
Linux-based IoT botnet which is controlled through IRC and normally used to carry out DDoS attacks.
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Indicator Removal: Timestomp
Adversaries may remove indicators of compromise from the host to evade detection.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.