Overview

overview

10

Static

static

10

d2d0a9fc34...54.elf

ubuntu-18.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff1a3683a5ad87f88858e92fbcf1ae57.bin

  • Size

    280KB

  • MD5

    24a61a2771d320492649517d9ba179fc

  • SHA1

    a40a18b3eef6254695c270bad9339450a3744db4

  • SHA256

    ffe9f7c5d8645d51226f325ba7e6dc5513215fd4ede071509c03d8797a04c74d

  • SHA512

    30162c654dd1dba8c5a35612bdd14072d89228a8d5b1d10d337d9a75dc5ba99e33179ffe9731e1ce646b42b5771ba8084c2daeebcb1b7c1d16741de0503cf1f0

  • SSDEEP

    6144:MlxBBPb6YPojyJxFbxbeKxBmrN7NMmAJUHTgxgOG:wBBP8j2xFbEKxB6SkTgG

Score
10/10
xorddos

Malware Config

Extracted

Family

xorddos

C2

http://www1.gggatat456.com/dd.rar

ppp.gggatat456.com:1525

ppp.xxxatat456.com:1525

p5.dddgata789.com:1525

p5.lpjulidny7.com:1525
Attributes
  • crc_polynomial

    EDB88320

xor.plain

Signatures

  • XorDDoS payload 1 IoCs
  • Xorddos family
    xorddos

Files

  • ff1a3683a5ad87f88858e92fbcf1ae57.bin
    .zip

    Password: infected

  • d2d0a9fc3491d0689529b251d666f36b739acfbf4f7fe8190b6ebabb887b7154.elf
    .elf linux x86