General

  • Target
    2026-03-04_0e94a61a1690e53cf211dbc6163c75b5_billgates_dofloo_ganiw_qnapcrypt_setag
  • Size 3.0MB
  • Sample260304-1mskhafx61
  • SHA256 b02337d82c44ed46e5b186bd54cde717be39da81a29fb332090d10a5c444ccb6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-03-04_0e94a61a1690e53cf211dbc6163c75b5_billgates_dofloo_ganiw_qnapcrypt_setag
    • Size 3.0MB
    • SHA256 b02337d82c44ed46e5b186bd54cde717be39da81a29fb332090d10a5c444ccb6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • BillGates

      BillGates is a Linux botnet.

    • Billgates family

    • Detects BillGates payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks