echobot | vcimanagement[.]ppc[.]elf

General

Target
vcimanagement.ppc.elf
Size 180KB
Sample261007-hxtw7sdv3y
SHA256 2ab64c8f758a30c93961e7481b0d889559a50ffef46d273bb4fc1e1d27997975
MD5 aaf70b29ce899f7ac338741ed2388066
SHA1 ef48ba422052878d42dd1c0841e6e7484017f098
SHA512 e54688eff2bd6199e8305f234f7f6d6da53ad021b5445df6de0ef7aecf12e176512aad252389802547c244871683bfb3af189a8458952b488a7c0072cdca8b26
SSDEEP 1536:tgHZAzgI6jC9CxBlQQ5Vohz1EshxOxEKuK8pLxf0/7+Bvsb1rTmgtThnX9DqcZS/:kA2b5Mk2xc+pUxphntWcGAj12
TLSH
T1E004190377090E07D2532EF027771BE093ABED5229B5B284741FAECD82B59B26446EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: Echobot
An updated variant of Mirai which infects a wide range of IoT devices to form a botnet.
botnet trojan echobot

Detected Echobot 1 IoCs

resource	yara_rule
sample	family_echobot

SHA256 2ab64c8f758a30c93961e7481b0d889559a50ffef46d273bb4fc1e1d27997975
MD5 aaf70b29ce899f7ac338741ed2388066
SHA1 ef48ba422052878d42dd1c0841e6e7484017f098
SHA512 e54688eff2bd6199e8305f234f7f6d6da53ad021b5445df6de0ef7aecf12e176512aad252389802547c244871683bfb3af189a8458952b488a7c0072cdca8b26
SSDEEP 1536:tgHZAzgI6jC9CxBlQQ5Vohz1EshxOxEKuK8pLxf0/7+Bvsb1rTmgtThnX9DqcZS/:kA2b5Mk2xc+pUxphntWcGAj12
TLSH
T1E004190377090E07D2532EF027771BE093ABED5229B5B284741FAECD82B59B26446EDD
MD5 SHA1 SHA512 SSDEEP TLSH

linux ppc