xlzyktus
- SHA256 311c93575efd4eeeb9c6674d0ab8de263b72a8fb060d04450daccc78ec095151
-
XorDDoS payload
General
- Target xlzyktus
- Size 549KB
- Sample230704-crvzescc2v
- SHA256 311c93575efd4eeeb9c6674d0ab8de263b72a8fb060d04450daccc78ec095151
- MD5 895f7fff165ddfba70b7d718ac3de989
- SHA1 2663c2ebb853083f5cf645cdc0cce31c8ace4fba
- SHA512 c4d3a5eea879e69d347e29a60780e2ddc31f0d2a78abc7429b8d2b4306065c34f0ed1a03cd0a74234f5098ef239f745fccb87086c5cdaf9f65383d119e77e617
- SSDEEP 12288:VeRvuKqiVZ4En5drNK0pPEfJKlHZ8mG97Qxee6yzmxd:VIv/qiVNHNDEfJKHZ8mG9QeeOd
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Extracted
Family
-
xorddos
C2
-
www.imagetw0.com:889
-
www.myserv012.com:889
-
http://qq.com/lib.asp
Attributes
-
crc_polynomial
CDB88320
xor.plain
Signatures
- XorDDoS payload 1 IoCs
resource yara_rule sample family_xorddos - Xorddos family
File Explorer
-
xlzyktus.elf 549KB