kaiten | 1a973f2aed69908c3361a74deafdd812c7c9aa95f986adc5cb666ef06bfc96c0[.]bin

General

Target
1a973f2aed69908c3361a74deafdd812c7c9aa95f986adc5cb666ef06bfc96c0.bin
Size 776KB
Sample261014-z4gznabv21
SHA256 1a973f2aed69908c3361a74deafdd812c7c9aa95f986adc5cb666ef06bfc96c0
MD5 da5d2b814dee8df27ee52fe2d57e77de
SHA1 0ac59b16e5f39fc3e95b5d5fa5b0c28a52f022b5
SHA512 0d8ba980ce25229d184e331a7d20b759fb0fce9944fc43035535095d3d3303f819a50f06d32b438ae816f96a4b33b382232e3f842d952f85c0a0f969b86acb40
SSDEEP 12288:ekcRTIy0MMI8DwQnwL+ce+weaIC3nd2Mw5QX6PRE:0SFUQoBnZaqV5
TLSH
T1CAF46E5AED1E3C01E2DAE37CDF8E83E1621FB290D32351B33D920258D5866E9CAF1565
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

botnet kaiten

Family: Kaiten,Tsunami
Linux-based IoT botnet which is controlled through IRC and normally used to carry out DDoS attacks.
botnet kaiten

Detects Kaiten/Tsunami Payload 1 IoCs

resource	yara_rule
sample	family_kaiten_v4

1a973f2aed69908c3361a74deafdd812c7c9aa95f986adc5cb666ef06bfc96c0.bin

.elf 776KB

SHA256 1a973f2aed69908c3361a74deafdd812c7c9aa95f986adc5cb666ef06bfc96c0
MD5 da5d2b814dee8df27ee52fe2d57e77de
SHA1 0ac59b16e5f39fc3e95b5d5fa5b0c28a52f022b5
SHA512 0d8ba980ce25229d184e331a7d20b759fb0fce9944fc43035535095d3d3303f819a50f06d32b438ae816f96a4b33b382232e3f842d952f85c0a0f969b86acb40
SSDEEP 12288:ekcRTIy0MMI8DwQnwL+ce+weaIC3nd2Mw5QX6PRE:0SFUQoBnZaqV5
TLSH
T1CAF46E5AED1E3C01E2DAE37CDF8E83E1621FB290D32351B33D920258D5866E9CAF1565
MD5 SHA1 SHA512 SSDEEP TLSH

linux aarch64