kaiten | 5be192c264bb518e388e91210fa8200cc68f56ba192c2075da196e6035f9a667[.]bin

General

Target
5be192c264bb518e388e91210fa8200cc68f56ba192c2075da196e6035f9a667.bin
Size 66KB
Sample261111-bwmm6sdc52
SHA256 5be192c264bb518e388e91210fa8200cc68f56ba192c2075da196e6035f9a667
MD5 0826f053af834307e4d1b8d1dd9735b1
SHA1 410ad4f7df3449b5c4fb77234adc73d758f33238
SHA512 1cc3241e9c0ff8a00ce3a2fccadc8874cdfb95591cda657cca7c2601a39198d16f0adda3560810ec27fee8a872d98b0ce94d8520b3c289e87d0f9de3a8211bc3
SSDEEP 1536:FE002FKN7Nq79whcL7H+ECPosGhGpEUvIt+uWP3ZnTdi:FEuMNopwhbEYo1G2UvIt+u83ZnTdi
TLSH
T18C632A03A9A28FBBC1966AF516B74A300757FC110F5B0B99753DE9F80B079CDB90A364
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

botnet kaiten

Family: Kaiten,Tsunami
Linux-based IoT botnet which is controlled through IRC and normally used to carry out DDoS attacks.
botnet kaiten

Detects Kaiten/Tsunami Payload 1 IoCs

resource	yara_rule
sample	family_kaiten_v4

SHA256 5be192c264bb518e388e91210fa8200cc68f56ba192c2075da196e6035f9a667
MD5 0826f053af834307e4d1b8d1dd9735b1
SHA1 410ad4f7df3449b5c4fb77234adc73d758f33238
SHA512 1cc3241e9c0ff8a00ce3a2fccadc8874cdfb95591cda657cca7c2601a39198d16f0adda3560810ec27fee8a872d98b0ce94d8520b3c289e87d0f9de3a8211bc3
SSDEEP 1536:FE002FKN7Nq79whcL7H+ECPosGhGpEUvIt+uWP3ZnTdi:FEuMNopwhbEYo1G2UvIt+u83ZnTdi
TLSH
T18C632A03A9A28FBBC1966AF516B74A300757FC110F5B0B99753DE9F80B079CDB90A364
MD5 SHA1 SHA512 SSDEEP TLSH

linux sh