Overview

overview

10

Static

static

1

2026-02-25..._setag

ubuntu-18.04-amd64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-02-25_a7e83c8d556405a858066443a24de166_billgates_dofloo_ganiw_qnapcrypt_setag
  • Size 2.7MB
  • Sample260225-ldhavaaw3c
  • SHA256 df25ef9f86602c619ea0d6702feb571efda915bc029efd05fd440c50e1dfa57d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
billgatesbotnetdiscoverylinux

Malware Config

Targets

    • Target
      2026-02-25_a7e83c8d556405a858066443a24de166_billgates_dofloo_ganiw_qnapcrypt_setag
    • Size 2.7MB
    • SHA256 df25ef9f86602c619ea0d6702feb571efda915bc029efd05fd440c50e1dfa57d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    botnetdiscoverybillgates

    • BillGates

      BillGates is a Linux botnet.

      botnetbillgates

    • Billgates family

      billgates

    • Detects BillGates payload

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks