History

qjerome 9f13e5caa6 attempt with clickable link		2024-07-02 15:17:50 +02:00
..
analysis	chg: reprocessed all logs to include dst_port in graphs	2024-06-27 23:01:31 +02:00
e59dd13dc8dbb2c9e3612c6f1188622067ed388f6248567c56479d1677c79e5b	New samples from malware bazaar	2024-06-24 14:50:22 +02:00
README.md	attempt with clickable link	2024-07-02 15:17:50 +02:00
virustotal.json	sample-doc-attempt	2024-07-02 11:41:17 +00:00

README.md

Sample Information

VirusTotal Threat Label	trojan.tsunami/kaiten
md5	7b1aec339bee5beed674c8cb576bb881
sha1	28cc31a46db6970ded6900cc3d6a51c0cb068702
sha256	e59dd13dc8dbb2c9e3612c6f1188622067ed388f6248567c56479d1677c79e5b
sha512	08867041b15afdfc586eb3b872859deed5c5b2c8abcdd500db04a0b7a190bf9657e1c6a2f184ec6ec7ed6c5e847235da46459b7896053414ff669138442ac2eb

VirusTotal: https://www.virustotal.com/gui/file/e59dd13dc8dbb2c9e3612c6f1188622067ed388f6248567c56479d1677c79e5b

Analysis

Detection Names

a variant of Linux/Tsunami.NCD
Backdoor.BDS/Katien.R
Backdoor.Linux.aeeb
Backdoor:Linux/Tsunami.C!MTB
Backdoor.Linux.Tsunami.x
Backdoor.Tsunami/Linux!1.A1B2 (CLASSIC)
BDS/Katien.R
DDoS:Linux/Tsunami
Detected
E32/Mirai.DJ.gen!Camelot
ELF_KAITEN.SM
ELF:Tsunami-A
ELF:Tsunami-FP [Trj]
ELF/Tsunami.NCD!tr
Generic.Malware.GJIFg.78B1411A
Generic.Malware.GJIFg.78B1411A (B)
Gen:NN.Mirai.36808
HEUR:Backdoor.Linux.Tsunami.bh
Linux/DDoS-Kaiten.gen.a
Linux.Kaiten
Linux.Siggen.9999
Linux.Trojan.Gafgyt
Linux/Tsunami-A
Linux/Tsunami.Gen
Malicious (score: 99)
malware (ai score=100)
Script.Ks.Malware.3227
Static AI - Malicious ELF
Suspicious.Linux.Save.a
Trojan ( 0040f09d1 )
Trojan.Elf32.Tsunami.knlqdv
Trojan.Linux.Mirai
Trojan/Linux.Tsunami.a
Trojan.Linux.Tsunami.m!c
Win.Trojan.Tsunami-5