ntpd
- SHA256 ef59833a3a01ae7f7b8369d4ed6d43a2c96a88c081f687c35563d869035c6a61
-
Detected Gafgyt variant
-
Detects Kaiten/Tsunami payload
General
- Target ntpd
- Size 199KB
- Sample261015-ampwhaae83
- SHA256 ef59833a3a01ae7f7b8369d4ed6d43a2c96a88c081f687c35563d869035c6a61
Score
10/10
Malware Config
Signatures
- Family: Gafgyt/Bashlite
IoT botnet with numerous variants first seen in 2014.
- Family: Kaiten,Tsunami
Linux-based IoT botnet which is controlled through IRC and normally used to carry out DDoS attacks.
- Detected Gafgyt variant 1 IoCs
- Detects Kaiten/Tsunami payload 1 IoCs
File Explorer
-
ntpd