General

  • Target

    260a03b99a4dd13bab9b14853ba2910d.elf

  • Size

    197KB

  • MD5

    260a03b99a4dd13bab9b14853ba2910d

  • SHA1

    3bb4ebbfa6cc83831131d4db9aef17bdccc01d58

  • SHA256

    c6e5abafdd7d604ccfb03e4002a47696486607f5f7248f300d283137b4f47263

  • SHA512

    5ec891db5192b1056e7a26fec785883bc3d7bbd9024c954570dfd6524f15b7032b382b3fbad7bd3339825705089082c1c4a291913e5def5e138486e70b84a271

  • SSDEEP

    3072:aFPwrygmMZovmni7ttoGSfQZM7dFWGnwvGFc/mt3k6k8VM:a9weg7ZE7ttoGS37nwvGFc/mt3k6k8m

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

239.255.255.250:1900

Signatures

  • Detected Gafgyt variant 1 IoCs
  • Enemybot family
  • Gafgyt family
  • family_enemybot 1 IoCs

    EnemyBot payload

Files

  • 260a03b99a4dd13bab9b14853ba2910d.elf
    .elf linux ppc