General

  • Target

    8226547208.zip

  • Size

    289KB

  • MD5

    b81b9fa9569b43307e5e4867d7e083eb

  • SHA1

    46b3b5a1d1fd904532cefb94dd37bccc64be64ff

  • SHA256

    407a1cc55e34b0ea03e6e8f57930aa8ba4952d99815c8681563a4e0160a8b44a

  • SHA512

    75cf07e4a8efd627407fe4fb081bea0b7794a00b026aae8e0690c8b82df20dcb6c12ae976cc7b0b73b7c7794fa5c3231b9f2cd6b324ebf97c60c5043d0bd90b1

  • SSDEEP

    6144:8MAcDOc6BiZsTYHy5x0q5wKvXPxu79J5W/YEZNXOXCALnTRMphj:2cyinHyLJvx0LuNedb9WN

Score
10/10

Malware Config

Extracted

Family

xorddos

C2

axf6.com:80

www.enoan2107.com:80

www.gzcfr5axf6.com:80

Signatures

  • XorDDoS payload 1 IoCs
  • Xorddos family

Files

  • 8226547208.zip
    .zip

    Password: infected

  • f5720c01aa338636c5cf23a242ced34d9f29132eced4d13e391e9a3f765dc4e6
    .elf linux x86