General
-
Target
x.o
-
Size
611KB
-
Sample
220602-vfcmtaghc7
-
MD5
d46dd322e3cefa2b6eda0c96b84f7611
-
SHA1
5dae4f419d23a4d5f42d4ea0e5d67382d26b34ca
-
SHA256
47c0af3e024fb5b38a97768bb9f6dce954fe358ce7f24c46dcc23689e8687a70
-
SHA512
8c3047a1ffa39982c39cb04d2fad34a49502711a004448176945c60a1aeed177676cc920ef02ddb81c1205935ed05ca46630cee165d2c36fdc08059264f0dc5d
Static task
static1
Behavioral task
behavioral1
Sample
x.o
Resource
ubuntu1804-amd64-en-20211208
Malware Config
Extracted
xorddos
http://pcdown.gddos.com:8080
soft8.gddos.com:25
103.233.83.245:25
baidu.gddos.com:25
Targets
-
-
Target
x.o
-
Size
611KB
-
MD5
d46dd322e3cefa2b6eda0c96b84f7611
-
SHA1
5dae4f419d23a4d5f42d4ea0e5d67382d26b34ca
-
SHA256
47c0af3e024fb5b38a97768bb9f6dce954fe358ce7f24c46dcc23689e8687a70
-
SHA512
8c3047a1ffa39982c39cb04d2fad34a49502711a004448176945c60a1aeed177676cc920ef02ddb81c1205935ed05ca46630cee165d2c36fdc08059264f0dc5d
Score9/10-
Writes file to system bin folder
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Write file to user bin folder
-
Reads runtime system information
Reads data from /proc virtual filesystem.
-
Writes file to tmp directory
Malware often drops required files in the /tmp directory.
-