Overview

overview

10

Static

static

10

19586a60a4...75.elf

debian-9-armhf

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7fd06392b947f926cb5a77afb7094eaa.bin

  • Size

    119KB

  • MD5

    c4854402568c38098489cf38d664b3e2

  • SHA1

    ae907c8ef2f2c6b0bf68ed2e6325d0cd7af5a8b9

  • SHA256

    9b67e9c043facc263503a46df7e3292c03f410af10c498a4af221e86fe28e3e9

  • SHA512

    b4d42cd5065c8064476f6ea46d7e31420a4d8a7047f391362d7633265268be5028c2799ea5d424ce7239ed38d2762cd4a52745297b5a8e5dbe5f992451f0d64e

  • SSDEEP

    3072:B4FlI9VsZErD+ShXsoGl8RN5phNSs8lIXK3RiVKrdX:ml/QDT1snl8bnKjiXK3prB

Score
10/10
enemybotgafgyt

Malware Config

Extracted

Family

gafgyt

C2

239.255.255.250:1900

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Enemybot family
    enemybot
  • Gafgyt family
    gafgyt
  • family_enemybot 1 IoCs

    EnemyBot payload

Files

  • 7fd06392b947f926cb5a77afb7094eaa.bin
    .zip

    Password: infected

  • 19586a60a462a11f66e81079efb6299338de004c6ff9ebada074da32ce7be175.elf
    .elf linux arm