Neko, Mirai and Bashlite Target Routers, Devices
Tags
attack-pattern: Botnet - T1583.005 Botnet - T1584.005 Credentials - T1589.001 Exploits - T1587.004 Exploits - T1588.005 Firmware - T1592.003 Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Ssh - T1021.004 Denial Of Service
Show in Graph
Common Information
Type Value
UUID 49ffe40b-1299-4378-a247-781876ff84f9
Fingerprint f79cb9d0ad91218a
Analysis status DONE
Considered CTI value 2
Text language
Published Aug. 13, 2019, midnight
Added to db Oct. 15, 2024, 4:16 p.m.
Last updated Nov. 17, 2024, 5:55 p.m.
Headline Neko, Mirai and Bashlite Target Routers, Devices
Title Neko, Mirai and Bashlite Target Routers, Devices
Detected Hints/Tags/Attributes 64/1/10
Source URLs
Redirection Url
Details Source https://www.trendmicro.com/en_ph/research/19/h/back-to-back-campaigns-neko-mirai-and-bashlite-malware-variants-use-various-exploits-to-target-several-routers-devices.html
Details Source https://www.trendmicro.com/en_id/research/19/h/back-to-back-campaigns-neko-mirai-and-bashlite-malware-variants-use-various-exploits-to-target-several-routers-devices.html
Details Source https://www.trendmicro.com/en_fi/research/19/h/back-to-back-campaigns-neko-mirai-and-bashlite-malware-variants-use-various-exploits-to-target-several-routers-devices.html
Details Source https://www.trendmicro.com/en_th/research/19/h/back-to-back-campaigns-neko-mirai-and-bashlite-malware-variants-use-various-exploits-to-target-several-routers-devices.html
Details Source https://www.trendmicro.com/en_be/research/19/h/back-to-back-campaigns-neko-mirai-and-bashlite-malware-variants-use-various-exploits-to-target-several-routers-devices.html
Details Source https://www.trendmicro.com/en_in/research/19/h/back-to-back-campaigns-neko-mirai-and-bashlite-malware-variants-use-various-exploits-to-target-several-routers-devices.html
Details Source https://www.trendmicro.com/en_ca/research/19/h/back-to-back-campaigns-neko-mirai-and-bashlite-malware-variants-use-various-exploits-to-target-several-routers-devices.html
Details Source https://www.trendmicro.com/en_my/research/19/h/back-to-back-campaigns-neko-mirai-and-bashlite-malware-variants-use-various-exploits-to-target-several-routers-devices.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Attributes
Details Type #Events CTI Value
Details CVE 32 
cve-2015-2051
Details CVE 72 
cve-2017-17215
Details CVE 43 
cve-2018-10561
Details CVE 45 
cve-2018-10562
Details CVE 73 
cve-2014-8361
Details CVE 2 
cve-2018-15379
Details Domain 2 
backdoor.linux.neko.ac
Details IPv4 2 
185.244.25.200
Details IPv4 2 
167.71.7.231
Details Url 2 
http://185.244.25.200/bins/x86.neko