85682d3effdb2d559fd84df491e9461a.bin
- SHA256 8e996db5961bec2587b92b94e946d2b58230187426757f199ca99b59074d6391
Password
infected
General
- Target 85682d3effdb2d559fd84df491e9461a.bin
- Size 280KB
- Sample231102-j99nvsbd76
- SHA256 8e996db5961bec2587b92b94e946d2b58230187426757f199ca99b59074d6391
- MD5 f7deb1e92e10d40f33b50b886e657e8f
- SHA1 ce093f05fdfb05de22a14fcf89ef2b977b008985
- SHA512 9c1795f9a0ba280c3eab424f31e0db6dcf4e7c607701fc7bac7f57dc7c5905113d9d3a1e2ea6dc5a19ffaa678e532ab2057b5952346c13680b63f20c2e38c583
- SSDEEP 6144:OSSULPH/xircidRzYbGtN7HI5Z3IPYATgntsozTYjW39QR+HuofyZyP:BSU7H0rFdxtls8YATAKWeufyZE
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Extracted
Family
-
xorddos
C2
-
http://www1.gggatat456.com/dd.rar
-
ppp.gggatat456.com:1525
-
ppp.xxxatat456.com:1525
-
p5.dddgata789.com:1525
-
p5.lpjulidny7.com:1525
Attributes
-
crc_polynomial
EDB88320
xor.plain
Signatures
- XorDDoS payload 1 IoCs
resource yara_rule static1/unpack001/3a8a11b60fd8e2f93d29fb46cdda68fd404b06147a7c717d3619b088e39875ba.elf family_xorddos - Xorddos family
File Explorer
-
85682d3effdb2d559fd84df491e9461a.bin.zip 280KB
-
3a8a11b60fd8e2f93d29fb46cdda68fd404b06147a7c717d3619b088e39875ba.elf.elf 611KB
3a8a11b60fd8e2f93d29fb46cdda68fd404b06147a7c717d3619b088e39875ba.elf
- SHA256 3a8a11b60fd8e2f93d29fb46cdda68fd404b06147a7c717d3619b088e39875ba
- MD5 85682d3effdb2d559fd84df491e9461a
- SHA1 2fb53f36a77339e1dd8458dd3fe561355de76211
- SHA512 f4cb94b160ed93d57b05d151c949c4dfd3a8b44d45af6d9432d2a9f1fafc02dec4e66d4f3cbdeeba16c769fc97b4f48a611aa92f653b1aa8f07b90d876168a86
- SSDEEP 12288:FBXOvdwV1/n/dQFhWlH/c1dHo4h9L+zNZrryT6yF8EEP4UlUuTh1Ae:FBXmkN/+Fhu/Qo4h9L+zNNyBVEBl/91f
- MD5 SHA1 SHA512 SSDEEP
-
XorDDoS payload