Overview

overview

10

Static

static

1

2026-10-19...pcrypt

ubuntu-18.04-amd64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-10-19_d8f03d50055238ae97b10e539d0815ab_qnapcrypt
  • Size 2.1MB
  • Sample261020-ca61cssz4p
  • SHA256 b57efcb80a4f88099ebcdae1af74f264329418f6ab008f23774b26da71440d6b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
kaitenbotnetdiscoverylinux

Malware Config

Targets

    • Target
      2026-10-19_d8f03d50055238ae97b10e539d0815ab_qnapcrypt
    • Size 2.1MB
    • SHA256 b57efcb80a4f88099ebcdae1af74f264329418f6ab008f23774b26da71440d6b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    botnetdiscoverykaiten

    • Detects Kaiten/Tsunami payload

    • Family: Kaiten,Tsunami

      Linux-based IoT botnet which is controlled through IRC and normally used to carry out DDoS attacks.

      botnetkaiten

    • Runs EXE from memory

      Runs an executable from memory, likely to minimize footprint

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks