Overview
overview
10Static
static
10chargenattack
ubuntu-18.04-amd64
1chargenscan
ubuntu-18.04-amd64
1dnsattack
ubuntu-18.04-amd64
1dnsscan
ubuntu-18.04-amd64
1ntpattack
ubuntu-18.04-amd64
1ntpscan
ubuntu-18.04-amd64
1snmpattack
ubuntu-18.04-amd64
1snmpscan
ubuntu-18.04-amd64
1speed.py
ubuntu-18.04-amd64
1speed.py
debian-9-armhf
1speed.py
debian-9-mips
1speed.py
debian-9-mipsel
1ssdpattack
ubuntu-18.04-amd64
1ssdpscan
ubuntu-18.04-amd64
1tcp
ubuntu-18.04-amd64
1ts3attack
ubuntu-18.04-amd64
1ts3scan
ubuntu-18.04-amd64
1Behavioral task
behavioral1
Sample
chargenattack
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
chargenscan
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral3
Sample
dnsattack
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral4
Sample
dnsscan
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral5
Sample
ntpattack
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral6
Sample
ntpscan
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral7
Sample
snmpattack
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral8
Sample
snmpscan
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral9
Sample
speed.py
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral10
Sample
speed.py
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral11
Sample
speed.py
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral12
Sample
speed.py
Resource
debian9-mipsel-20231215-en
Behavioral task
behavioral13
Sample
ssdpattack
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral14
Sample
ssdpscan
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral15
Sample
tcp
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral16
Sample
ts3attack
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral17
Sample
ts3scan
Resource
ubuntu1804-amd64-20231215-en
General
-
Target
76b71f823da9a1e0420e01c37ff3e5d0
-
Size
424KB
-
MD5
76b71f823da9a1e0420e01c37ff3e5d0
-
SHA1
17d4b0fa58b47236628a80ed8fccb19793b66370
-
SHA256
e7cee8fcc9f2b4604f55f316963284c7fed0f7c3c763df40413adbdebd23e0f8
-
SHA512
1904bcb0302265470da263c7563e690b68db41d3b104d08e4bc4316c907e541df2117ef102d069e995724ffc2b65770ac3d2695c4afdd3843dcc500c755c9086
-
SSDEEP
12288:h/o522Q6gG9LGvK5sGRv/1iNzk+4tGf74xam3Z:9NG96KWGRn18oUTOamJ
Malware Config
Signatures
-
Contains strings common to LOLSquad DDoS tools 1 IoCs
Resembles a range of public tools written in C intended for DDoS attacks.
resource yara_rule static1/unpack001/tcp lolsquad_ddos
Files
-
76b71f823da9a1e0420e01c37ff3e5d0.zip
-
chargen
-
chargenattack.elf linux x64
-
chargenscan.elf linux x64
-
dns
-
dnsattack.elf linux x64
-
dnsscan.elf linux x64
-
ntp
-
ntpattack.elf linux x64
-
ntpscan.elf linux x64
-
ntpscanf
-
ntpscanfile
-
snmp
-
snmpattack.elf linux x64
-
snmpscan.elf linux x64
-
speed.py.py .sh linux
-
ssdp
-
ssdpattack.elf linux x64
-
ssdpscan.elf linux x64
-
tcp.elf linux x64
-
ts3
-
ts3attack.elf linux x64
-
ts3scan.elf linux x64