Resubmissions

12-05-2023 10:49

230512-mw2b4sfa3x 10

General

  • Target

    xlzyktus

  • Size

    549KB

  • MD5

    895f7fff165ddfba70b7d718ac3de989

  • SHA1

    2663c2ebb853083f5cf645cdc0cce31c8ace4fba

  • SHA256

    311c93575efd4eeeb9c6674d0ab8de263b72a8fb060d04450daccc78ec095151

  • SHA512

    c4d3a5eea879e69d347e29a60780e2ddc31f0d2a78abc7429b8d2b4306065c34f0ed1a03cd0a74234f5098ef239f745fccb87086c5cdaf9f65383d119e77e617

  • SSDEEP

    12288:VeRvuKqiVZ4En5drNK0pPEfJKlHZ8mG97Qxee6yzmxd:VIv/qiVNHNDEfJKHZ8mG9QeeOd

Score
10/10

Malware Config

Extracted

Family

xorddos

C2

www.imagetw0.com:889

www.myserv012.com:889

http://qq.com/lib.asp

Attributes
  • crc_polynomial

    CDB88320

xor.plain

Signatures

  • XorDDoS payload 1 IoCs
  • Xorddos family

Files

  • xlzyktus
    .elf linux x86