Behavioral task
behavioral1
Sample
4aaa0b0d1ccb91b090df97a47b15536157f6f141cdce67867d339d0f01b3981d
Resource
ubuntu1804-amd64-20221111-en
General
-
Target
4aaa0b0d1ccb91b090df97a47b15536157f6f141cdce67867d339d0f01b3981d
-
Size
659KB
-
MD5
1d79488a09ef56ae2e60e1985b18e7a2
-
SHA1
0b25e8f36a9738bb4d2dd2cd711f1aa7213db517
-
SHA256
4aaa0b0d1ccb91b090df97a47b15536157f6f141cdce67867d339d0f01b3981d
-
SHA512
b77fda07473e8f3e7ff2a1e25bb556164e3fddb40fe791a0b96538dfcc766f96c6e15082dccc77e79fff73f34497d0c43643134a633ff8740bbc4a287ec0c91b
-
SSDEEP
12288:aBo9ETRNT9Wn1J0OhS18tDm8PCExfLZ9JCCpyvOH36ybCQ7YLVN1/lFkThVArw:aBo9ANo70OE8A8PCExfLZ/CTvQrKLd/Q
Malware Config
Extracted
xorddos
103.25.9.245:8002
103.240.141.50:8002
66.102.253.30:8002
ndns.dsaj2a1.org:8002
ndns.dsaj2a.org:8002
ndns.hcxiaoao.com:8002
ndns.dsaj2a.com:8002
Signatures
-
XorDDoS payload 1 IoCs
Processes:
resource yara_rule sample family_xorddos -
Xorddos family
Files
-
4aaa0b0d1ccb91b090df97a47b15536157f6f141cdce67867d339d0f01b3981d.elf linux x86