Resubmissions

24-07-2023 08:36

230724-khjtsscc8x 4

24-07-2023 07:58

230724-jttmpsbf29 10

General

  • Target

    https://github.com/Pyran1/MalwareDatabase/archive/refs/heads/master.zip

  • Sample

    230724-jttmpsbf29

Malware Config

Extracted

Family

xorddos

C2

http://aa.hostasa.org/config.rar

cdn.cloud2cdn.com:8080

Attributes
  • crc_polynomial

    EDB88320

xor.plain

Targets

    • Target

      https://github.com/Pyran1/MalwareDatabase/archive/refs/heads/master.zip

    • Detected Linux variant of RansomEXX

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • RansomEXX Ransomware

      Targeted ransomware which initially affected Windows systems, but released a Linux variant in November 2020.

    • XorDDoS

      Botnet and downloader malware targeting Linux-based operating systems and IoT devices.

    • XorDDoS payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks