TF-MAL-elf.hajime
📛 Threat Title
Malware family: Hajime
Description
ThreatFox malware family `elf.hajime`. Printable name: Hajime.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
elf.hajime
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/elf.hajime
IOC database
- Type
- domain
- Value
elf.hajime- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-elf.hajime
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/elf.hajime
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:bazaar.abuse.ch
A malware sample can be associated with only one malware family . The page below gives you an overview on malware samples that MalwareBazaar has identified as Hajime .
-
web:en.wikipedia.org
Hajime (Japanese for "beginning") is a malware which appears to be similar to the Wifatch malware in that it appears to attempt to secure devices. [5] Hajime is also far more advanced than Mirai, according to various researchers.
-
web:hunt.io
Hajime is a smart malware that targets IoT devices and is a decentralized p2p botnet. Unlike other botnets, it seems to be securing infected devices so they can't be compromised by other malware . Despite its wide spread, the purpose of Hajime is still unknown.
-
web:ieeexplore.ieee.org
A Hajime worm with a lifespan destructs itself when exhausting the lifespan. Using agent-oriented Petri net PN 2, we analyzed the influence of the Hajime worm's lifespan in the mitigation against IoT malware . From the result, we can say that Hajime worm with lifespan becomes a safer mitigation method.
-
web:malpedia.caad.fkie.fraunhofer.de
Details for the Hajime malware family including references, samples and yara signatures.
-
web:www.esecurityplanet.com
The Hajime malware family , which was first uncovered [PDF] by Rapidity Networks researchers last fall, is increasingly competing with the Mirai botnet to infect Internet of Things (IoT) devices ...
-
web:www.infopoint-security.de
Hajime malware and were able to reverse the messaging protocol. The vulnerability has been patched and updated, but a botnet this size with a flexible backend and high potential for crimin l behavior will certainly attract the attention of black hats.
-
web:www.radware.com
Hajime Author'. Rapidity Networks originally attributed the name Hajime , so before the Rapidity report there was no 'Hajime , just a malware . After the report, the malware became known as Hajime and the author of the malware started signing subsequent versions using
-
web:www.sciencedirect.com
Hajime is similar to Mirai in terms of the target device's types and the way it manages infected devices (bots) [23]. Hajime's malware has an update functionality that allows attackers to update features. Hajime's malware generates an IP address for another IoT device to infect and check whether the addresses are included in a blacklist.
-
web:www.semanticscholar.org
Since Mirai can produce copies of itself, this paper modeled the infection phenomenon of Mirai with agent-oriented Petri net PN2, and evaluated the cost-performance of mitigation methods which use reboot and/or a worm Hajime without DDoS capabilities. In September 2016, an unprecedented massive DDoS attack was launched by IoT devices. This attack was caused by a new type of malware called ...
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.