Behavioral task
behavioral1
Sample
ea40ecec0b30982fbb1662e67f97f0e9d6f43d2d587f2f588525fae683abea73.elf
Resource
ubuntu1804-amd64-20221111-en
ubuntu-18.04-amd64
7 signatures
150 seconds
General
-
Target
f9191bab1e834d4aef3380700639cee9.bin
-
Size
257KB
-
MD5
949e796852f17daaefbcf79415ce2bed
-
SHA1
2414ac64d232cd0b392e9e21583b32c2272323a7
-
SHA256
1b5d61b593b499bcefd79601a1b0631ab42a5f517255f0a29ff08a9c20705a3e
-
SHA512
463cb2f27d17f1420268021efdd8105629802b18f87c8274f90b5372d1956d25c2751ad13ead554e9e0bd63814ec1bbdbed6b5b7b82c7e8cbb8aab2f778d03d7
-
SSDEEP
6144:rQGz1U+37ZacLyIVNuUgxmg3qZo3K/q1RkyF57u4GqXbX:rQGz1/2ONuUPg3qqayYyS4Gqb
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
api.markerbio.com:112
api.enoan2107.com:112
pi.enoan2107.com:112
Signatures
-
XorDDoS payload 1 IoCs
Processes:
resource yara_rule static1/unpack001/ea40ecec0b30982fbb1662e67f97f0e9d6f43d2d587f2f588525fae683abea73.elf family_xorddos -
Xorddos family
Files
-
f9191bab1e834d4aef3380700639cee9.bin.zip
Password: infected
-
ea40ecec0b30982fbb1662e67f97f0e9d6f43d2d587f2f588525fae683abea73.elf.elf linux x86