enemybot | f86ee8fe2ff8cd8357dee139129f2f7b[.]elf | Triage

Sharing

General

Target

f86ee8fe2ff8cd8357dee139129f2f7b.elf
Size

271KB
MD5

f86ee8fe2ff8cd8357dee139129f2f7b
SHA1

8bc18ec12361021dcd90b79edc3fd7778f6cab1b
SHA256

d244b3079b96110649dc0080adeab0d22e853bc3f979883d947626a361c25e9b
SHA512

00991734113b6d0a8c2fb9bc02195b1dbc87da69b23bc76af9971d8270a113e2a8710bc9bd70d59cb9aa60507887d92625418e17f44131118637178b154d569d
SSDEEP

6144:9NVVeGIMzGZAH7Q6aWb1RSv1iKGAMP80bjm:uwH7QBWBkv1iKGAMP80/m

Score

10^/10

enemybot gafgyt

Malware Config

Extracted

Family

gafgyt

C2

239.255.255.250:1900

Signatures

Detected Gafgyt variant 1 IoCs

Processes:

resource yara_rule

sample family_gafgyt
Enemybot family
enemybot
Gafgyt family
gafgyt
family_enemybot 1 IoCs
EnemyBot payload

Processes:

resource yara_rule

sample family_enemybot

Files

f86ee8fe2ff8cd8357dee139129f2f7b.elf
.elf linux mipsel