kaiten | 5eb68d021718b24309062cf31e572cec3b6fef80ded9e8c4ce10d3b10a05db48[.]bin

General

Target
5eb68d021718b24309062cf31e572cec3b6fef80ded9e8c4ce10d3b10a05db48.bin
Size 728KB
Sample261110-dwjydscf39
SHA256 5eb68d021718b24309062cf31e572cec3b6fef80ded9e8c4ce10d3b10a05db48
MD5 1a8c62bc08b6b14ab614e7c2c45c7be5
SHA1 3f3b4820304575930906ef1c641ebdd95fa29f80
SHA512 a7c6b24ab3450192f825ff34c5f564698771a49f4f8c15367b2038f70e7a13cd412202277683b6b78fcff6ab02ae0bc79a3c361652608beb418e99768d443f55
SSDEEP 768:xMXOlZq5uggv6GheBnNpdGYNPF8KQTNWJ9MgpqG:MoZquggv6GqpdnNPF8KQTNgTZ
TLSH
T118F4D93FA763CC78C04D6570099B426D59F2E0B59BA75207B2864AB36F0374A0E7AFD1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

botnet kaiten

Family: Kaiten,Tsunami
Linux-based IoT botnet which is controlled through IRC and normally used to carry out DDoS attacks.
botnet kaiten

Detects Kaiten/Tsunami Payload 1 IoCs

resource	yara_rule
sample	family_kaiten_v4

5eb68d021718b24309062cf31e572cec3b6fef80ded9e8c4ce10d3b10a05db48.bin

.elf 728KB

SHA256 5eb68d021718b24309062cf31e572cec3b6fef80ded9e8c4ce10d3b10a05db48
MD5 1a8c62bc08b6b14ab614e7c2c45c7be5
SHA1 3f3b4820304575930906ef1c641ebdd95fa29f80
SHA512 a7c6b24ab3450192f825ff34c5f564698771a49f4f8c15367b2038f70e7a13cd412202277683b6b78fcff6ab02ae0bc79a3c361652608beb418e99768d443f55
SSDEEP 768:xMXOlZq5uggv6GheBnNpdGYNPF8KQTNWJ9MgpqG:MoZquggv6GqpdnNPF8KQTNgTZ
TLSH
T118F4D93FA763CC78C04D6570099B426D59F2E0B59BA75207B2864AB36F0374A0E7AFD1
MD5 SHA1 SHA512 SSDEEP TLSH

linux x64