enemybot | c8b022cadda8194efec5e406407bd407[.]bin

General

Target
c8b022cadda8194efec5e406407bd407.bin
Size 93KB
Sample240203-dset9sffg7
SHA256 e9982d5a9cb7ab696703d2a4bd4ed3b0e7600120af880a4529d4c57ad700a442
MD5 34b33cbdcc5864de82b56a133ea0ff8b
SHA1 b1ca49e6a2f15152ca5246d9a5f78fbe877a3b47
SHA512 5e6f5472e586479c087e721ee7ee6d48689ce7cb6272382955e1f53ca7b5bb351c20405cd5d1588ecfb28dce771ecc975ddffde336387a669b4cf8af9783fa00
SSDEEP 1536:Ztx8h8ROAS3FN3ayBFKrmDS4ZB3LTqvI/PlNjeLfBogaaFP2lQYL9:ZLhRO1FNZkgX3fqI/PlNqLLP2lQc
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

enemybot gafgyt

Family

C2

Detected Gafgyt variant 1 IoCs

resource	yara_rule
static1/unpack001/7e14f903d2476931d8adc1bfd537ac8aecc1f69e69d9e7155ccd6d28682347a9.elf	family_gafgyt

family_enemybot 1 IoCs

EnemyBot payload

resource	yara_rule
static1/unpack001/7e14f903d2476931d8adc1bfd537ac8aecc1f69e69d9e7155ccd6d28682347a9.elf	family_enemybot

c8b022cadda8194efec5e406407bd407.bin

.zip 93KB
7e14f903d2476931d8adc1bfd537ac8aecc1f69e69d9e7155ccd6d28682347a9.elf

.elf 189KB

SHA256 e9982d5a9cb7ab696703d2a4bd4ed3b0e7600120af880a4529d4c57ad700a442
MD5 34b33cbdcc5864de82b56a133ea0ff8b
SHA1 b1ca49e6a2f15152ca5246d9a5f78fbe877a3b47
SHA512 5e6f5472e586479c087e721ee7ee6d48689ce7cb6272382955e1f53ca7b5bb351c20405cd5d1588ecfb28dce771ecc975ddffde336387a669b4cf8af9783fa00
SSDEEP 1536:Ztx8h8ROAS3FN3ayBFKrmDS4ZB3LTqvI/PlNjeLfBogaaFP2lQYL9:ZLhRO1FNZkgX3fqI/PlNqLLP2lQc
MD5 SHA1 SHA512 SSDEEP

Password

infected