kaiten | 486e08c81f8cc33c317c91aab1e2c85a5420a25527a57773ba1a6e07883301ba[.]bin

General

Target
486e08c81f8cc33c317c91aab1e2c85a5420a25527a57773ba1a6e07883301ba.bin
Size 664KB
Sample261006-qlaceszwdz
SHA256 486e08c81f8cc33c317c91aab1e2c85a5420a25527a57773ba1a6e07883301ba
MD5 2d5c0df045ceb903dcef35ce55152a89
SHA1 e4dcce2ebcc9c7f2fd384f931fa49aada4243aab
SHA512 e7c415be52964d3177c68dddcb39f6e8f13db23337f87fafd36c7297fb124d15c5ad3d9add425fb4fd9f6a1665f954e5a149decefd3647c225cb259ee9cbe19c
SSDEEP 12288:awQTRP+rwWtJOaL/ZvYbYmallPkmyMpjFruOiPUruI+4z:awYP+Hd/ZvYb3wlvAOiPi+4
TLSH
T1EEE48DC8F386AE7EF0431A310B478B0A5613E5839354AB9F162E97653A8D7DFCD53248
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

botnet kaiten

Family: Kaiten,Tsunami
Linux-based IoT botnet which is controlled through IRC and normally used to carry out DDoS attacks.
botnet kaiten

Detects Kaiten/Tsunami Payload 1 IoCs

resource	yara_rule
sample	family_kaiten_v4

486e08c81f8cc33c317c91aab1e2c85a5420a25527a57773ba1a6e07883301ba.bin

.elf 664KB

SHA256 486e08c81f8cc33c317c91aab1e2c85a5420a25527a57773ba1a6e07883301ba
MD5 2d5c0df045ceb903dcef35ce55152a89
SHA1 e4dcce2ebcc9c7f2fd384f931fa49aada4243aab
SHA512 e7c415be52964d3177c68dddcb39f6e8f13db23337f87fafd36c7297fb124d15c5ad3d9add425fb4fd9f6a1665f954e5a149decefd3647c225cb259ee9cbe19c
SSDEEP 12288:awQTRP+rwWtJOaL/ZvYbYmallPkmyMpjFruOiPUruI+4z:awYP+Hd/ZvYb3wlvAOiPi+4
TLSH
T1EEE48DC8F386AE7EF0431A310B478B0A5613E5839354AB9F162E97653A8D7DFCD53248
MD5 SHA1 SHA512 SSDEEP TLSH

linux