kaiten | smips[.]elf

General

Target
smips.elf
Size 819KB
Sample261007-s2k5zaa14w
SHA256 1f3aafbc1cf237abd17ab9d07e861d3099ab0706e533554182ac2476dd0f37ca
MD5 f3ab265aec2bc8e1379ca115fe6af3af
SHA1 42a811ea6cd7825f49e7ad9493bd9396fbbde9a8
SHA512 6cafef303fe735d1dec9fb7f96604b0448f261bbdd043f1aeb8f507bbb4715ccf769aebdc86ac6b45e4f214a41d0b4c3cbfd4a02a85409eb9fda0e6a2ae493fb
SSDEEP 12288:+RfT1xj1uzKxqk69RTl4RPGMAfCArVhlXYzCwKgpsbZtX4ye:+Rf5xjjxqLl4RPGoAzlXYzCwQt6
TLSH
T142056C237B21DFA5E314D27009F3C6515AE521A61AE2409673BCC7187E21B2E2D5FFE8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

botnet kaiten

Family: Kaiten,Tsunami
Linux-based IoT botnet which is controlled through IRC and normally used to carry out DDoS attacks.
botnet kaiten

Detects Kaiten/Tsunami Payload 1 IoCs

resource	yara_rule
sample	family_kaiten_v4

SHA256 1f3aafbc1cf237abd17ab9d07e861d3099ab0706e533554182ac2476dd0f37ca
MD5 f3ab265aec2bc8e1379ca115fe6af3af
SHA1 42a811ea6cd7825f49e7ad9493bd9396fbbde9a8
SHA512 6cafef303fe735d1dec9fb7f96604b0448f261bbdd043f1aeb8f507bbb4715ccf769aebdc86ac6b45e4f214a41d0b4c3cbfd4a02a85409eb9fda0e6a2ae493fb
SSDEEP 12288:+RfT1xj1uzKxqk69RTl4RPGMAfCArVhlXYzCwKgpsbZtX4ye:+Rf5xjjxqLl4RPGoAzlXYzCwQt6
TLSH
T142056C237B21DFA5E314D27009F3C6515AE521A61AE2409673BCC7187E21B2E2D5FFE8
MD5 SHA1 SHA512 SSDEEP TLSH

linux mipsbe