Resubmissions

20-04-2023 08:21

230420-j9hv5sae61 10

28-03-2023 01:07

230328-bgyf5agb77 10

General

  • Target

    12fecefe30f2ad8f49aae67b92920adc.bin

  • Size

    280KB

  • MD5

    b23b94b01043b1a417a1758911c167d6

  • SHA1

    f2cac81f5a723ef198695c1c4ba8446ae486ed42

  • SHA256

    3ce1c192c8a840bef782f7b32c63adafb2571e94afab8cdc97224f9598bdc495

  • SHA512

    66b41de62d6808a8ec3891a1a6f204d85ce021c0bb9dc6d42ed03cc1bd76e7b4117e995059892686c222f3bfe631d3935dddb9cbab73363b7991f6bec36cdddb

  • SSDEEP

    6144:eNE97w04S3MrH7ytn+U0DLuLe2aCuTFbuncvIAFP0W29HGyJuq8RSH/AcrNKspnH:e697UWn+BC0FS8ZcW2ppuqa8YkNnblx3

Score
10/10

Malware Config

Extracted

Family

xorddos

C2

7.com:53

ww.dnstells.com:53

ww.gzcfr5axf6.com:53

ww.gzcfr5axf7.com:53

Signatures

  • XorDDoS payload 1 IoCs
  • Xorddos family

Files

  • 12fecefe30f2ad8f49aae67b92920adc.bin
    .zip

    Password: infected

  • c0b0225201fd3a4c08245e58bbb4b844e0d3426e89b9ac3fc34db37d994fb182.elf
    .elf linux x86