General

  • Target

    IObeENwjbsd

  • Size

    926KB

  • MD5

    95c1a09703156d48b81ab9bf2dc4f9ba

  • SHA1

    a003272be1e884b2bf95c911ad0fe9878e68a8ba

  • SHA256

    d492e6805b3d5f70d10f2d2262affd96ee341b7d1370a865e0c5c3bf4bfaf63a

  • SHA512

    fec2a8224290aafbf98b30baac261e62474c78b3cedd1989f8ecf0e14be1d5971dbfeb46e45b20907adfd64547d0fd08cb786c984b4063e9c3aac39b124e2fdb

  • SSDEEP

    24576:3uHVAvo0b5xGnXvKj5C5qnUfmVj3jw3s1QsMGe776I:3gAQKIKjM5qnZZT1Qsy76I

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

239.255.255.250:1900

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Enemybot family
  • Gafgyt family
  • family_enemybot 1 IoCs

    EnemyBot payload

Files

  • IObeENwjbsd
    .elf linux x64