Resubmissions

10/01/2024, 13:46

240110-q2yd7agegk

02/11/2023, 08:28

231102-kdepaahe7v10

02/11/2023, 08:25

231102-kbbjvabd8710

02/11/2023, 08:23

231102-kaly7ahe3110

02/11/2023, 08:23

231102-j99nvsbd76

31/10/2023, 10:42

231031-mr4lnsfe3y10

General

  • Target
    85682d3effdb2d559fd84df491e9461a.bin
  • Size 280KB
  • Sample231102-kaly7ahe31
  • SHA256 8e996db5961bec2587b92b94e946d2b58230187426757f199ca99b59074d6391
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • xorddos

C2
  • http://www1.gggatat456.com/dd.rar

  • ppp.gggatat456.com:1525

  • ppp.xxxatat456.com:1525

  • p5.dddgata789.com:1525

  • p5.lpjulidny7.com:1525

Attributes
  • crc_polynomial

    EDB88320

xor.plain

Signatures

  • XorDDoS payload 1 IoCs
  • Xorddos family

File Explorer

  • 85682d3effdb2d559fd84df491e9461a.bin
    .zip 280KB
  • 3a8a11b60fd8e2f93d29fb46cdda68fd404b06147a7c717d3619b088e39875ba.elf
    .elf 611KB

85682d3effdb2d559fd84df491e9461a.bin

  • SHA256 8e996db5961bec2587b92b94e946d2b58230187426757f199ca99b59074d6391
  • MD5 SHA1 SHA512 SSDEEP
Password
infected