Behavioral task
behavioral1
Sample
44046ce4a3a47b4d22ac7697817bfc16e18d835a33f0898c3e4df359c33d158c
Resource
ubuntu1804-amd64-20221111-en
ubuntu-18.04-amd64
6 signatures
150 seconds
General
-
Target
44046ce4a3a47b4d22ac7697817bfc16e18d835a33f0898c3e4df359c33d158c
-
Size
611KB
-
MD5
bc57b23aa694336f34ce91037c97b196
-
SHA1
001a8484c9cc0ba429646cf4c7fcf9815a29b6cf
-
SHA256
44046ce4a3a47b4d22ac7697817bfc16e18d835a33f0898c3e4df359c33d158c
-
SHA512
d178e8c8db4a63ab88301a2fc2dd1ea2444fd508a8c80ac3a9b0109f43c6e00781a84415a6955028fe39dbe310b6950f7971e7258c03912586f980d04a88714c
-
SSDEEP
12288:FBXOvdwV1/n/dQFhWlH/c1dHo4h9L+zNZrrLT6yF8EEP4UlUuTh1AG:FBXmkN/+Fhu/Qo4h9L+zNNLBVEBl/91h
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
http://aa.hostasa.org/config.rar
ww.myserv012.com:3306
ww.search2c.com:3306
Attributes
-
crc_polynomial
EDB88320
xor.plain
Signatures
-
XorDDoS payload 1 IoCs
Processes:
resource yara_rule sample family_xorddos -
Xorddos family
Files
-
44046ce4a3a47b4d22ac7697817bfc16e18d835a33f0898c3e4df359c33d158c.elf linux x86