General

  • Target

    ad5778bbe662d7d3d419f33e29eb498e.bin

  • Size

    83KB

  • MD5

    155efe510422a61356c6cbab7476b436

  • SHA1

    74cbc7256958c2d9134166433e870ac13739b6a2

  • SHA256

    952df5cb5cba7cb25b556f6c7a4a5e965e4b0d49853047d4edaa30b285dd9a01

  • SHA512

    08ca892ccac7c0b27a34ffc24a9c53e1868c6ea795d4693bbaf7931ff34b24482ba7ca044da341b6c6d80604c604f7a8b39fac9bab9fbee624ebad0532bbd270

  • SSDEEP

    1536:yhivaJbxBS2mRcOD3uiux91I0EPfE6eWTxCnILr3V7/pWugxa1mLTUPiJJqcV:JuzKeiuafEFWTEnILdjgH

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

239.255.255.250:1900

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Enemybot family
  • Gafgyt family
  • family_enemybot 1 IoCs

    EnemyBot payload

Files

  • ad5778bbe662d7d3d419f33e29eb498e.bin
    .zip

    Password: infected

  • fc8a9aebf291ddcd9a507868bf293b5c5ecf95de6b6739acd1b84e67932f9b0e.elf
    .elf linux x64