General

  • Target

    IObeENwjx64

  • Size

    1.1MB

  • MD5

    0f07ea9584a6fe034b6a689a85c96cf5

  • SHA1

    e015f5ff2fb9d9e6027039b35764236a381bc709

  • SHA256

    6b5ca4343069c5231425e01ed23951abf0d3021088d633cdc25f4401bb0b8e15

  • SHA512

    f7776ea13bf83f69c9592f4636e51bde1fb1d0a6016b3a03bab0594c83ed3918dae8c3a7757bb96784f01771a68ac38415a42b77e6cb55ce7687359ef5dcd978

  • SSDEEP

    24576:4yZpLqAqEqSy9mFiMmY9kpmEAiUPpDE6bJ:4qpLtqKy9mFEY9zD

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

239.255.255.250:1900

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Enemybot family
  • Gafgyt family
  • family_enemybot 1 IoCs

    EnemyBot payload

Files

  • IObeENwjx64
    .elf linux x64