General

  • Target

    f9191bab1e834d4aef3380700639cee9.bin

  • Size

    257KB

  • MD5

    949e796852f17daaefbcf79415ce2bed

  • SHA1

    2414ac64d232cd0b392e9e21583b32c2272323a7

  • SHA256

    1b5d61b593b499bcefd79601a1b0631ab42a5f517255f0a29ff08a9c20705a3e

  • SHA512

    463cb2f27d17f1420268021efdd8105629802b18f87c8274f90b5372d1956d25c2751ad13ead554e9e0bd63814ec1bbdbed6b5b7b82c7e8cbb8aab2f778d03d7

  • SSDEEP

    6144:rQGz1U+37ZacLyIVNuUgxmg3qZo3K/q1RkyF57u4GqXbX:rQGz1/2ONuUPg3qqayYyS4Gqb

Score
10/10

Malware Config

Extracted

Family

xorddos

C2

api.markerbio.com:112

api.enoan2107.com:112

pi.enoan2107.com:112

Signatures

  • XorDDoS payload 1 IoCs
  • Xorddos family

Files

  • f9191bab1e834d4aef3380700639cee9.bin
    .zip

    Password: infected

  • ea40ecec0b30982fbb1662e67f97f0e9d6f43d2d587f2f588525fae683abea73.elf
    .elf linux x86