Resubmissions
12-05-2023 10:49
230512-mw2b4sfa3x 10Behavioral task
behavioral1
Sample
xlzyktus
Resource
ubuntu1804-amd64-en-20211208
ubuntu-18.04-amd64
13 signatures
150 seconds
General
-
Target
xlzyktus
-
Size
549KB
-
MD5
895f7fff165ddfba70b7d718ac3de989
-
SHA1
2663c2ebb853083f5cf645cdc0cce31c8ace4fba
-
SHA256
311c93575efd4eeeb9c6674d0ab8de263b72a8fb060d04450daccc78ec095151
-
SHA512
c4d3a5eea879e69d347e29a60780e2ddc31f0d2a78abc7429b8d2b4306065c34f0ed1a03cd0a74234f5098ef239f745fccb87086c5cdaf9f65383d119e77e617
-
SSDEEP
12288:VeRvuKqiVZ4En5drNK0pPEfJKlHZ8mG97Qxee6yzmxd:VIv/qiVNHNDEfJKHZ8mG9QeeOd
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
www.imagetw0.com:889
www.myserv012.com:889
http://qq.com/lib.asp
Attributes
-
crc_polynomial
CDB88320
xor.plain
Signatures
-
XorDDoS payload 1 IoCs
Processes:
resource yara_rule sample family_xorddos -
Xorddos family
Files
-
xlzyktus.elf linux x86