General
-
Target
f8f82cf76d78be5823b27bf92c794b80
-
Size
647KB
-
MD5
f8f82cf76d78be5823b27bf92c794b80
-
SHA1
5b3391ea0dfd9f6b4b3c58bbb2a5065d5e5beaef
-
SHA256
591895fe233e81599250a02d2418493ce9c249ad03be31dd38ba6b880a30c2dc
-
SHA512
3941f3cb3eb45812b2d466264ad7c6db2f2035a005e37698182135c54af6207e06a36bbe7ed6935f4c523b646c04d21f751a0988f1d9e48b9ea59dd8576747e8
-
SSDEEP
12288:RBRO1UmJJ0nHgBL9YfJip2qm+x4h1Tonvp6y07l7mtBDvnD/u9hMHDB:RBRpmJ+HyL9AiAqm+x4h1mv6wvnDWXMN
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
http://info1.3000uc.com/b/u.php
43.230.144.12:5520
192.168.1.131:3826
abcd.com:8080
Attributes
-
crc_polynomial
EDB88320
xor.plain
Signatures
-
XorDDoS payload 1 IoCs
-
Xorddos family
Files
-
f8f82cf76d78be5823b27bf92c794b80