Behavioral task
behavioral1
Sample
23s.exe
Resource
ubuntu1804-amd64-en-20211208
ubuntu-18.04-amd64
13 signatures
150 seconds
General
-
Target
23s.exe
-
Size
549KB
-
MD5
63d6cd74a7cd01bf3a3921c36e90237f
-
SHA1
f697783da228c7787cf1c6a67a10a8c065d6aaa7
-
SHA256
4f02cc4d5426b63e3eca3ada3c9a8a111a952c0e373c5500519ea8eea5ade853
-
SHA512
51b1aef53c8277b8700630b144f15c9a41df358a43d71ef0b9352bbdf71c8777774f1ef1e361c8c95930143b54fcde590885242df3da60dce5b1a1d3761e2db3
-
SSDEEP
12288:VeRvuKqiVZ4En5drNK0pPEfJKlHZ8mG97Qxee6yzmx:VIv/qiVNHNDEfJKHZ8mG9QeeO
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
www.imagetw0.com:889
www.myserv012.com:889
http://qq.com/lib.asp
Attributes
-
crc_polynomial
CDB88320
xor.plain
Signatures
-
XorDDoS payload 1 IoCs
Processes:
resource yara_rule sample family_xorddos -
Xorddos family
Files
-
23s.exe.elf linux x86