General

  • Target

    635310bf9fce382320b3ee8716a1424f.elf

  • Size

    168KB

  • MD5

    635310bf9fce382320b3ee8716a1424f

  • SHA1

    e80ec55bfb60d8629d887e07f925adcc09edd301

  • SHA256

    4470dffdf485099a7ebbe92b3e8d1db1ff14d8b2c39e3aabaa69c8122e86b91b

  • SHA512

    7889bb91634d2dbaa7c5eb70314f7d80590fc770cb31e178c547f38a0ccccd6c297d831b687589126316ea80d8a237ccd6afc4e0b41b8103b0ad9c6575a6cd88

  • SSDEEP

    3072:8PSi28gcKeX9BCxDFwlcgPifbAIBXYM2bkzBe/B+NJP8vWQcY1EKk5WcTM:B8gSsFwdPCfBXY1Ke/gNN8vWQcY1EKkM

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

239.255.255.250:1900

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Enemybot family
  • Gafgyt family
  • family_enemybot 1 IoCs

    EnemyBot payload

Files

  • 635310bf9fce382320b3ee8716a1424f.elf
    .elf linux x86