General

  • Target

    IObeENwjspc

  • Size

    215KB

  • MD5

    f8e05a7dd9349be816077e7c8713d8d7

  • SHA1

    16ed04e6381a448142cce8d7430f8b186a481cb1

  • SHA256

    81374730884ae359ae35ab7212614f9360b2292f380c93e5a713f0fcf8bb8249

  • SHA512

    63734036d1322b6712acd546b15860725a9a094c98fdcca4376109316cc47cac610d67df3b3a4ec4e94003fdc1b826f940a5c1e2a9fd024a07cf9f4b46462000

  • SSDEEP

    6144:VlMYpPVmSLmxxhfcygCQ7UHSv/Fs/68NkQDkPm:VlMYp8gCQIyv/Fs/68NksMm

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

239.255.255.250:1900

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Enemybot family
  • Gafgyt family
  • family_enemybot 1 IoCs

    EnemyBot payload

Files

  • IObeENwjspc
    .elf linux sparc