Overview

overview

10

Static

static

10

3a8a11b60f...ba.elf

ubuntu-18.04-amd64

10

Resubmissions

02-11-2023 08:28

231102-kdepaahe7v 10

02-11-2023 08:25

231102-kbbjvabd87 10

02-11-2023 08:23

231102-kaly7ahe31 10

31-10-2023 10:42

231031-mr4lnsfe3y 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    85682d3effdb2d559fd84df491e9461a.bin

  • Size

    280KB

  • MD5

    f7deb1e92e10d40f33b50b886e657e8f

  • SHA1

    ce093f05fdfb05de22a14fcf89ef2b977b008985

  • SHA256

    8e996db5961bec2587b92b94e946d2b58230187426757f199ca99b59074d6391

  • SHA512

    9c1795f9a0ba280c3eab424f31e0db6dcf4e7c607701fc7bac7f57dc7c5905113d9d3a1e2ea6dc5a19ffaa678e532ab2057b5952346c13680b63f20c2e38c583

  • SSDEEP

    6144:OSSULPH/xircidRzYbGtN7HI5Z3IPYATgntsozTYjW39QR+HuofyZyP:BSU7H0rFdxtls8YATAKWeufyZE

Score
10/10
xorddos

Malware Config

Extracted

Family

xorddos

C2

http://www1.gggatat456.com/dd.rar

ppp.gggatat456.com:1525

ppp.xxxatat456.com:1525

p5.dddgata789.com:1525

p5.lpjulidny7.com:1525
Attributes
  • crc_polynomial

    EDB88320

xor.plain

Signatures

  • XorDDoS payload 1 IoCs
  • Xorddos family
    xorddos

Files

  • 85682d3effdb2d559fd84df491e9461a.bin
    .zip

    Password: infected

  • 3a8a11b60fd8e2f93d29fb46cdda68fd404b06147a7c717d3619b088e39875ba.elf
    .elf linux x86