General
-
Target
https://github.com/Pyran1/MalwareDatabase/archive/refs/heads/master.zip
-
Sample
230724-jttmpsbf29
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://github.com/Pyran1/MalwareDatabase/archive/refs/heads/master.zip
Resource
win10v2004-20230703-en
windows10-2004-x64
17 signatures
1800 seconds
Malware Config
Extracted
Family
xorddos
C2
http://aa.hostasa.org/config.rar
cdn.cloud2cdn.com:8080
Attributes
-
crc_polynomial
EDB88320
xor.plain
Targets
-
-
Target
https://github.com/Pyran1/MalwareDatabase/archive/refs/heads/master.zip
-
Detected Linux variant of RansomEXX
-
RansomEXX Ransomware
Targeted ransomware which initially affected Windows systems, but released a Linux variant in November 2020.
-
XorDDoS
Botnet and downloader malware targeting Linux-based operating systems and IoT devices.
-
XorDDoS payload
-
Drops file in System32 directory
-