milanbot | arm5 | Triage™

General

Target
arm5
Size 171KB
Sample261003-nvrlysys9m
SHA256 60268e39aad39916cf6fa89701ebfc2964a47c3df0f84637819c64f5498129dc
MD5 c04780525c037c8ce05e3b13cc1a117d
SHA1 e8677f626c640f2627296989befe727c0e243d4e
SHA512 25990f046914c6c7d112be291b1a590b47636edcce76593773c6bb46b1feba8241563fba50a51c33bf005fa568189015eb720d138911ec55bb34a47f0229fb3e
SSDEEP 3072:5W9jYM1LoRws7kKI2ojBEg+Ct05E0YZQSkqewvrRG1DVZUWraX3KHoXD:AnFoRws4K7iBEg+3TwvrRG1DVZUWraX/
TLSH
T112040B06B8104B57C5C32BBAF7DF42993B376B1897DB3301EA28AEB42F8579D1D29111
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: MilanBot
MilanBot is a Gafgyt-based botnet with bundled cryptomining capability.
botnet miner milanbot

Detects MilanBot 1 IoCs

resource	yara_rule
sample	family_milanbot

SHA256 60268e39aad39916cf6fa89701ebfc2964a47c3df0f84637819c64f5498129dc
MD5 c04780525c037c8ce05e3b13cc1a117d
SHA1 e8677f626c640f2627296989befe727c0e243d4e
SHA512 25990f046914c6c7d112be291b1a590b47636edcce76593773c6bb46b1feba8241563fba50a51c33bf005fa568189015eb720d138911ec55bb34a47f0229fb3e
SSDEEP 3072:5W9jYM1LoRws7kKI2ojBEg+Ct05E0YZQSkqewvrRG1DVZUWraX3KHoXD:AnFoRws4K7iBEg+3TwvrRG1DVZUWraX/
TLSH
T112040B06B8104B57C5C32BBAF7DF42993B376B1897DB3301EA28AEB42F8579D1D29111
MD5 SHA1 SHA512 SSDEEP TLSH

linux arm