Behavioral task
behavioral1
Sample
f5720c01aa338636c5cf23a242ced34d9f29132eced4d13e391e9a3f765dc4e6
Resource
ubuntu1804-amd64-en-20211208
ubuntu-18.04-amd64
6 signatures
600 seconds
General
-
Target
8226547208.zip
-
Size
289KB
-
MD5
b81b9fa9569b43307e5e4867d7e083eb
-
SHA1
46b3b5a1d1fd904532cefb94dd37bccc64be64ff
-
SHA256
407a1cc55e34b0ea03e6e8f57930aa8ba4952d99815c8681563a4e0160a8b44a
-
SHA512
75cf07e4a8efd627407fe4fb081bea0b7794a00b026aae8e0690c8b82df20dcb6c12ae976cc7b0b73b7c7794fa5c3231b9f2cd6b324ebf97c60c5043d0bd90b1
-
SSDEEP
6144:8MAcDOc6BiZsTYHy5x0q5wKvXPxu79J5W/YEZNXOXCALnTRMphj:2cyinHyLJvx0LuNedb9WN
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
axf6.com:80
www.enoan2107.com:80
www.gzcfr5axf6.com:80
Signatures
-
XorDDoS payload 1 IoCs
Processes:
resource yara_rule static1/unpack001/f5720c01aa338636c5cf23a242ced34d9f29132eced4d13e391e9a3f765dc4e6 family_xorddos -
Xorddos family
Files
-
8226547208.zip.zip
Password: infected
-
f5720c01aa338636c5cf23a242ced34d9f29132eced4d13e391e9a3f765dc4e6.elf linux x86