Dinodasrat malware family
Dinodasrat is a malware family tracked by MalwareAnalyzer by Cyble across 7 publicly analyzed samples. First seen 2026-07-20, most recently 2026-07-31. Observed ATT&CK techniques include T1057, T1112.
Corpus statistics
- Publicly analyzed samples: 7
- First seen: 2026-07-20
- Last seen: 2026-07-31
- Verdicts: malicious 7
- File types: elf 5, pe 2
ATT&CK techniques used by Dinodasrat
Extracted command-and-control infrastructure
- 115.126.98.204:443 - 2 samples
- 199.231.211.19:8080 - 1 sample
Recent Dinodasrat samples
- 142_EarthKrahang_20240404.bin - malicious (2026-07-31)
- 105_EarthKrahang_20240404.bin - malicious (2026-07-31)
- 100_EarthKrahang_20240404.bin - malicious (2026-07-31)
- 094_EarthKrahang_20240404.bin - malicious (2026-07-31)
- 081_EarthKrahang_20240404.bin - malicious (2026-07-31)
- 072_EarthKrahang_20240404.bin - malicious (2026-07-31)
- 073_EarthKrahang_20240404.bin - malicious (2026-07-20)
Frequently asked about Dinodasrat
- What is Dinodasrat?
- Dinodasrat is a malware family tracked by MalwareAnalyzer by Cyble across 7 publicly analyzed samples. First seen 2026-07-20, most recently 2026-07-31. Observed ATT&CK techniques include T1057, T1112.
- How many Dinodasrat samples have been analyzed?
- MalwareAnalyzer by Cyble holds 7 publicly analyzed samples attributed to Dinodasrat, first seen 2026-07-20 and most recently 2026-07-31. This counts public submissions to this platform only, so it is a measure of what we have seen rather than of the family's total prevalence.
- What MITRE ATT&CK techniques does Dinodasrat use?
- Across our Dinodasrat samples the most frequently observed techniques are T1057 (2), T1112 (2). Counts are the number of analyzed samples in which each technique was observed.
- What file types does Dinodasrat use?
- Dinodasrat samples in this corpus are distributed as elf (5), pe (2).
- Does Dinodasrat use command-and-control infrastructure?
- Yes. 2 distinct command-and-control indicators have been extracted from Dinodasrat samples, either from static configuration or from traffic captured during sandbox detonation. The full list is published on the family page.
- Is Dinodasrat malicious?
- 7 of 7 analyzed Dinodasrat samples were scored malicious by the fused verdict, which combines multi-engine static scanning, YARA and hash reputation with behavior captured during real sandbox detonation. Each report lists every signal that contributed to its score.
Latest analyzed threats · ATT&CK coverage across the corpus · Threat trends