Overview

overview

10

Static

static

10

d2d0a9fc34...54.elf

ubuntu-18.04-amd64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    ff1a3683a5ad87f88858e92fbcf1ae57.bin
  • Size 280KB
  • Sample231028-c5e55aee43
  • SHA256 ffe9f7c5d8645d51226f325ba7e6dc5513215fd4ede071509c03d8797a04c74d
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
xorddos

Malware Config

Extracted

Family

  • xorddos

C2

  • http://www1.gggatat456.com/dd.rar

  • ppp.gggatat456.com:1525

  • ppp.xxxatat456.com:1525

  • p5.dddgata789.com:1525

  • p5.lpjulidny7.com:1525

Attributes
  • crc_polynomial

    EDB88320

xor.plain

Signatures

  • XorDDoS payload 1 IoCs
  • Xorddos family
    xorddos

File Explorer

  • ff1a3683a5ad87f88858e92fbcf1ae57.bin
    .zip 280KB
  • d2d0a9fc3491d0689529b251d666f36b739acfbf4f7fe8190b6ebabb887b7154.elf
    .elf 611KB

ff1a3683a5ad87f88858e92fbcf1ae57.bin

  • SHA256 ffe9f7c5d8645d51226f325ba7e6dc5513215fd4ede071509c03d8797a04c74d
  • MD5 SHA1 SHA512 SSDEEP
Password
infected