Behavioral task
behavioral1
Sample
c0b0225201fd3a4c08245e58bbb4b844e0d3426e89b9ac3fc34db37d994fb182.elf
Resource
ubuntu1804-amd64-20221111-en
ubuntu-18.04-amd64
8 signatures
150 seconds
General
-
Target
12fecefe30f2ad8f49aae67b92920adc.bin
-
Size
280KB
-
MD5
b23b94b01043b1a417a1758911c167d6
-
SHA1
f2cac81f5a723ef198695c1c4ba8446ae486ed42
-
SHA256
3ce1c192c8a840bef782f7b32c63adafb2571e94afab8cdc97224f9598bdc495
-
SHA512
66b41de62d6808a8ec3891a1a6f204d85ce021c0bb9dc6d42ed03cc1bd76e7b4117e995059892686c222f3bfe631d3935dddb9cbab73363b7991f6bec36cdddb
-
SSDEEP
6144:eNE97w04S3MrH7ytn+U0DLuLe2aCuTFbuncvIAFP0W29HGyJuq8RSH/AcrNKspnH:e697UWn+BC0FS8ZcW2ppuqa8YkNnblx3
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
7.com:53
ww.dnstells.com:53
ww.gzcfr5axf6.com:53
ww.gzcfr5axf7.com:53
Signatures
-
XorDDoS payload 1 IoCs
Processes:
resource yara_rule static1/unpack001/c0b0225201fd3a4c08245e58bbb4b844e0d3426e89b9ac3fc34db37d994fb182.elf family_xorddos -
Xorddos family
Files
-
12fecefe30f2ad8f49aae67b92920adc.bin.zip
Password: infected
-
c0b0225201fd3a4c08245e58bbb4b844e0d3426e89b9ac3fc34db37d994fb182.elf.elf linux x86