Behavioral task
behavioral1
Sample
atrdadsrcc
Resource
ubuntu1804-amd64-20221111-en
ubuntu-18.04-amd64
5 signatures
150 seconds
General
-
Target
2154547c69bf8bee7f296bd8ce56ffa4115da65c2308e9fc6d5079b2eb9dec93
-
Size
301KB
-
MD5
c49fa2869bac593226206beed59cf195
-
SHA1
6bca760e29263c5aa1228059a9a2880da8764ac8
-
SHA256
2154547c69bf8bee7f296bd8ce56ffa4115da65c2308e9fc6d5079b2eb9dec93
-
SHA512
f645fe1f2700ce4b51119900a2b173490da594fc26da3269a519e992f93b92a0bb9d0f4fd04bbcadee7a0e828c981c32fb32be8c5ffbd1526d815da1e4e2e628
-
SSDEEP
6144:2RNh8Nm0vWTFeeqy+UlH6wpmT1gVipVyhrV9FL3eyPrCimjQZJkey:6h8Nm0uTFe32awpmT1gEp+ay+pAI
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
103.25.9.245:8002
103.240.141.50:8002
66.102.253.30:8002
ndns.dsaj2a1.org:8002
ndns.dsaj2a.org:8002
ndns.hcxiaoao.com:8002
ndns.dsaj2a.com:8002
Signatures
-
XorDDoS payload 1 IoCs
Processes:
resource yara_rule static1/unpack001/atrdadsrcc family_xorddos -
Xorddos family
Files
-
2154547c69bf8bee7f296bd8ce56ffa4115da65c2308e9fc6d5079b2eb9dec93.zip
-
atrdadsrcc.elf linux x86