Behavioral task
behavioral1
Sample
iuwtfnzxxw
Resource
ubuntu1804-amd64-20221111-en
ubuntu-18.04-amd64
8 signatures
150 seconds
General
-
Target
iuwtfnzxxw
-
Size
611KB
-
MD5
d6bc45adaed51fe171e6b9f46dbe28e6
-
SHA1
17ef90985c369629150c79608167ee758180f2df
-
SHA256
09cdd0b6cb6e82f205f3ad4a6c098b6c5e84667d061026d3011b58c45bff335a
-
SHA512
fba9e72362fd1b0c799928d8d1eb43d9135eceb9c86f8e9c9632328c944dee5eb57eb1ae2fe6e4a429ab437355be0c0e2977af0652f88649e140b313ec6e5ada
-
SSDEEP
12288:FBXOvdwV1/n/dQFhWlH/c1dHo4h9L+zNZrrUT6yF8EEP4UlUuTh1AE:FBXmkN/+Fhu/Qo4h9L+zNNUBVEBl/91t
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
http://aa.hostasa.org/config.rar
cdn.cloud2cdn.com:8080
Attributes
-
crc_polynomial
EDB88320
xor.plain
Signatures
-
XorDDoS payload 1 IoCs
Processes:
resource yara_rule sample family_xorddos -
Xorddos family
Files
-
iuwtfnzxxw.elf linux x86