prometei_elf | na[.]elf

General

Target
na.elf
Size 1.2MB
Sample261111-h161yafd64
SHA256 b52c008ce9aa6c45d13e504737d010ecb26e14906efb444a148581073eecc0d2
MD5 2a6058e3800fb7b1b0d25bde08a91f82
SHA1 c4b9463b842d0313273a86f8516991c69f6d02e4
SHA512 f00e14562178655508c9ee13b6ba7eaa1c8d2300bb811beab1c0f32b3d7dea30f47ac54da795c73b44f9352c2404362b0f16bae2bcd653eac1671135483b498f
SSDEEP 24576:S7PjxB4gb5n8X1zaP7axA+d+a4TIucpWETPjkjcSy:SDjxB4m5n8XlaPWi+d+a4TjxQP40
TLSH
T188556BBBF2A770BCC167D030478BCBA2AC35B4B501212D7B61C4A9763D62DE11766B27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: Prometei
Prometei is a multiplatform botnet used to mine cryptocurrency.
botnet miner prometei_elf

Prometei payload 1 IoCs

resource	yara_rule
sample	family_prometei_elf

SHA256 b52c008ce9aa6c45d13e504737d010ecb26e14906efb444a148581073eecc0d2
MD5 2a6058e3800fb7b1b0d25bde08a91f82
SHA1 c4b9463b842d0313273a86f8516991c69f6d02e4
SHA512 f00e14562178655508c9ee13b6ba7eaa1c8d2300bb811beab1c0f32b3d7dea30f47ac54da795c73b44f9352c2404362b0f16bae2bcd653eac1671135483b498f
SSDEEP 24576:S7PjxB4gb5n8X1zaP7axA+d+a4TIucpWETPjkjcSy:SDjxB4m5n8XlaPWi+d+a4TjxQP40
TLSH
T188556BBBF2A770BCC167D030478BCBA2AC35B4B501212D7B61C4A9763D62DE11766B27
MD5 SHA1 SHA512 SSDEEP TLSH

linux x64