General

  • Target

    IObeENwjarm

  • Size

    215KB

  • MD5

    8f0ef21b5de9e86fb84f39100d232d31

  • SHA1

    dc251a7d8f85c9f22dcd88cdc1db553b2414837d

  • SHA256

    8bfbd5faf2dd2dfb76e60c14d010fbf1bcbe980950528709ceac4edc9f003c6a

  • SHA512

    2e2f07bddeaad98deef73b88054af5496dcf1dc5c716e31b92689601e939c535fc11eec69306755f29aed50f768ea09c3fc34967fb770d43df1f709a499ebf04

  • SSDEEP

    6144:+dta8mHLmWskspb7HI+YnFavgBE6OCTI6c3m:+dta82xZAjsnwvgBE6OCTI6Wm

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

239.255.255.250:1900

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Enemybot family
  • Gafgyt family
  • family_enemybot 1 IoCs

    EnemyBot payload

Files

  • IObeENwjarm
    .elf linux arm