General

  • Target

    IObeENwjppc

  • Size

    197KB

  • MD5

    aec11ee194130a76c27925eac83e3fd6

  • SHA1

    6b53170d4f78c18601ccbd386622c1fbc5a190ba

  • SHA256

    cd27206bfdcc025100d095572301c8f7def4e922263ede85cd51b4299c1e4e4b

  • SHA512

    5b154b3aa19f274addb0406598d03ee5ff0169d261baa8f8d1b60b43bbabd07435f4012c1834448854db0d587d39119cf91dc722abdbacafa23e7260f83d4aec

  • SSDEEP

    3072:aFPwrygmMZYvmj+PltoGSfQZM7dFGGrcvGFc/mt3k6k8VM:a9weg7ZMPltoGS3rrcvGFc/mt3k6k8m

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

239.255.255.250:1900

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Enemybot family
  • Gafgyt family
  • family_enemybot 1 IoCs

    EnemyBot payload

Files

  • IObeENwjppc
    .elf linux ppc