enemybot | 635310bf9fce382320b3ee8716a1424f[.]bin

General

Target
635310bf9fce382320b3ee8716a1424f.bin
Size 78KB
Sample240203-bvw58agbbq
SHA256 7e2cb1fd2c19485eb6b4604a3656477f628712f2e4fec202f7dcd105957e3b94
MD5 01d577465255d1c1f7d31777681912fb
SHA1 df24e7358fbaecf0012605c6e866feb24ea98f0c
SHA512 80131d9cf8f4499ffefeabd0bb37407d886a6148e0c026982f58d7cdd9a669c4d0c2f9bcc0751e4f200e53ef3931ee70a7306b9d9beaf64795ea7d49c5ff487e
SSDEEP 1536:Z3jX8ICvlKVPdTS7Wox5FfAhOt9X1nFTsXR3dbUCrGAYx91c:Zz8fvw7TS7BHFsOvt9sfUChYxI
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

enemybot gafgyt

Family

C2

Detected Gafgyt variant 1 IoCs

resource	yara_rule
static1/unpack001/4470dffdf485099a7ebbe92b3e8d1db1ff14d8b2c39e3aabaa69c8122e86b91b.elf	family_gafgyt

family_enemybot 1 IoCs

EnemyBot payload

resource	yara_rule
static1/unpack001/4470dffdf485099a7ebbe92b3e8d1db1ff14d8b2c39e3aabaa69c8122e86b91b.elf	family_enemybot

635310bf9fce382320b3ee8716a1424f.bin

.zip 78KB
4470dffdf485099a7ebbe92b3e8d1db1ff14d8b2c39e3aabaa69c8122e86b91b.elf

.elf 168KB

SHA256 7e2cb1fd2c19485eb6b4604a3656477f628712f2e4fec202f7dcd105957e3b94
MD5 01d577465255d1c1f7d31777681912fb
SHA1 df24e7358fbaecf0012605c6e866feb24ea98f0c
SHA512 80131d9cf8f4499ffefeabd0bb37407d886a6148e0c026982f58d7cdd9a669c4d0c2f9bcc0751e4f200e53ef3931ee70a7306b9d9beaf64795ea7d49c5ff487e
SSDEEP 1536:Z3jX8ICvlKVPdTS7Wox5FfAhOt9X1nFTsXR3dbUCrGAYx91c:Zz8fvw7TS7BHFsOvt9sfUChYxI
MD5 SHA1 SHA512 SSDEEP

Password

infected