enemybot | 7fd06392b947f926cb5a77afb7094eaa[.]bin

General

Target
7fd06392b947f926cb5a77afb7094eaa.bin
Size 119KB
Sample240208-b5ph5abh68
SHA256 9b67e9c043facc263503a46df7e3292c03f410af10c498a4af221e86fe28e3e9
MD5 c4854402568c38098489cf38d664b3e2
SHA1 ae907c8ef2f2c6b0bf68ed2e6325d0cd7af5a8b9
SHA512 b4d42cd5065c8064476f6ea46d7e31420a4d8a7047f391362d7633265268be5028c2799ea5d424ce7239ed38d2762cd4a52745297b5a8e5dbe5f992451f0d64e
SSDEEP 3072:B4FlI9VsZErD+ShXsoGl8RN5phNSs8lIXK3RiVKrdX:ml/QDT1snl8bnKjiXK3prB
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

enemybot gafgyt

Family

C2

Detected Gafgyt variant 1 IoCs

resource	yara_rule
static1/unpack001/19586a60a462a11f66e81079efb6299338de004c6ff9ebada074da32ce7be175.elf	family_gafgyt

family_enemybot 1 IoCs

EnemyBot payload

resource	yara_rule
static1/unpack001/19586a60a462a11f66e81079efb6299338de004c6ff9ebada074da32ce7be175.elf	family_enemybot

7fd06392b947f926cb5a77afb7094eaa.bin

.zip 119KB
19586a60a462a11f66e81079efb6299338de004c6ff9ebada074da32ce7be175.elf

.elf 331KB

SHA256 9b67e9c043facc263503a46df7e3292c03f410af10c498a4af221e86fe28e3e9
MD5 c4854402568c38098489cf38d664b3e2
SHA1 ae907c8ef2f2c6b0bf68ed2e6325d0cd7af5a8b9
SHA512 b4d42cd5065c8064476f6ea46d7e31420a4d8a7047f391362d7633265268be5028c2799ea5d424ce7239ed38d2762cd4a52745297b5a8e5dbe5f992451f0d64e
SSDEEP 3072:B4FlI9VsZErD+ShXsoGl8RN5phNSs8lIXK3RiVKrdX:ml/QDT1snl8bnKjiXK3prB
MD5 SHA1 SHA512 SSDEEP

Password

infected