Overview

overview

10

Static

static

10

f4a25e8d96...76.elf

ubuntu-18.04-amd64

10

Resubmissions

20-12-2023 05:38

231220-gb18qahbg5 10

10-11-2023 10:31

231110-mkezqseg4v 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f4a25e8d960c631699e1b9adab8d29e5e4a2ae0d3be1c7739275a6a72b9b0876.zip

  • Size

    294KB

  • MD5

    b89d8fde813baf69d557b4039cd91fce

  • SHA1

    d1d63c03a79227845c8a671dde1c6c02d383207f

  • SHA256

    93b1a887ed2648b92a7a76b4635a0f0cf3a96f4eae606562e1fac611585a71f8

  • SHA512

    c8be14007d15224f4045d22df20a4dc3496bf6fbd1bff84f6108b4907997422a3249e193611d81b595d6cf256812eaed322a21341f6ae8b6657742f3087bd4db

  • SSDEEP

    6144:Jhlh47NwUGlag0mhrb/IlqAm2p2vXvLz/AQMaI5yQOtJ1+ngpL:Jm7ql5/bI02kvzDAQMaUpWfPL

Score
10/10
xorddos

Malware Config

Extracted

Family

xorddos

C2

http://info1.3000uc.com/b/u.php

aaaaaaaaaa.re67das.com:5859

aa369369.f3322.org:2897
Attributes
  • crc_polynomial

    EDB88320

xor.plain

Signatures

  • XorDDoS payload 1 IoCs
  • Xorddos family
    xorddos

Files

  • f4a25e8d960c631699e1b9adab8d29e5e4a2ae0d3be1c7739275a6a72b9b0876.zip
    .zip

    Password: infected

  • f4a25e8d960c631699e1b9adab8d29e5e4a2ae0d3be1c7739275a6a72b9b0876.elf
    .elf linux x86