Behavioral task
behavioral1
Sample
1.elf
Resource
ubuntu1804-amd64-en-20211208
ubuntu-18.04-amd64
8 signatures
150 seconds
General
-
Target
1.elf
-
Size
611KB
-
MD5
ff1a3683a5ad87f88858e92fbcf1ae57
-
SHA1
ce220486f7d4723406582f8496e8483bcc546beb
-
SHA256
d2d0a9fc3491d0689529b251d666f36b739acfbf4f7fe8190b6ebabb887b7154
-
SHA512
9039533b03c9cbd3a31d1f232080a7c6296a74e36cad46f31678478451b521d0c19cc5cc25cf88bccc7c4ed006c2f99470595cdd34cf3814ee4509bb80d5eebd
-
SSDEEP
12288:FBXOvdwV1/n/dQFhWlH/c1dHo4h9L+zNZrryT6yF8EEP4UlUuTh1AG:FBXmkN/+Fhu/Qo4h9L+zNNyBVEBl/91h
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
http://www1.gggatat456.com/dd.rar
ppp.gggatat456.com:1525
ppp.xxxatat456.com:1525
p5.dddgata789.com:1525
p5.lpjulidny7.com:1525
Attributes
-
crc_polynomial
EDB88320
xor.plain
Signatures
-
XorDDoS payload 1 IoCs
Processes:
resource yara_rule sample family_xorddos -
Xorddos family
Files
-
1.elf.elf linux x86