General
-
Target
Ghost.q.elf
-
Size
596KB
-
MD5
8e6961210d82ddd5bdd636bbf68593a3
-
SHA1
9538b70c08b272fce9f3b25ff06c8828fdcb0175
-
SHA256
34d70d58eae0338f35488d9a05ac5d703db7aa97699e9365d85e9a843d7c4979
-
SHA512
f39142f568e4c3de66f48ba50552480a604d3a16287de0c1f14d2893c9eb0fdf39a80abcedd54294f5b8f9daf9ca62e9b08408e84a08b834ed36e905486bd85b
-
SSDEEP
12288:rPTJS+naeW9kclFEcMWbHdxZ7GkR2fX/6y9P/YAh7Dxu9hc7D:DTJfrW99q4bHdxZ7G1fXFND4XcX
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
gh.dsaj2a1.org:2428
ssh.upx.wang:2428
162.251.95.209:2428
Signatures
-
XorDDoS payload 1 IoCs
-
Xorddos family
Files
-
Ghost.q.elf