General

  • Target

    78e8d0437050ed177ca1b870e1285504.bin

  • Size

    77KB

  • MD5

    883da79ce3aaf3754a3cd58b45884d3f

  • SHA1

    f81b1fe2e8bba1be2e609835d93d80fbd1d22267

  • SHA256

    7783f53cca547bf06212752d01d0c6a5731fb1250c76834bdd06fc6643e8fa6f

  • SHA512

    9163219ae8be46f3785cda25ed4a95a8f713a719a5aa395045555d8ffd31a60862615a9a39e75ea227dc4af6e268dd4e1e07af2abb400c0440155592928fcab3

  • SSDEEP

    1536:SSZBD/2DeKRPU5o+5m6LLE1UtJCxmrkyUU5EuHDo+/2:LBb4emM+I41Ut6Y3UUNHDoc2

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

239.255.255.250:1900

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Enemybot family
  • Gafgyt family
  • family_enemybot 1 IoCs

    EnemyBot payload

Files

  • 78e8d0437050ed177ca1b870e1285504.bin
    .zip

    Password: infected

  • 15004ff8c231aa01bad46cf8a71aa08f646e4155f598a2c82ac5a7dc9366c0f8.elf
    .elf linux x86