Overview
overview
10Static
static
10hgfdfghrrt/autorun
ubuntu-18.04-amd64
6hgfdfghrrt/autorun
debian-9-armhf
6hgfdfghrrt/autorun
debian-9-mips
1hgfdfghrrt/autorun
debian-9-mipsel
6hgfdfghrrt/crontab
ubuntu-18.04-amd64
hgfdfghrrt/ghp
ubuntu-18.04-amd64
1hgfdfghrrt/lag
ubuntu-18.04-amd64
1hgfdfghrrt/layer7
ubuntu-18.04-amd64
1hgfdfghrrt/mech.vbs
windows7-x64
1hgfdfghrrt/mech.vbs
windows10-2004-x64
1hgfdfghrrt/mech.vbs
windows7-x64
1hgfdfghrrt/mech.vbs
windows10-2004-x64
1hgfdfghrrt/run
ubuntu-18.04-amd64
1hgfdfghrrt/run
debian-9-armhf
1hgfdfghrrt/run
debian-9-mips
1hgfdfghrrt/run
debian-9-mipsel
1hgfdfghrrt/s
ubuntu-18.04-amd64
hgfdfghrrt/skype
ubuntu-18.04-amd64
1hgfdfghrrt/socks.py
windows7-x64
3hgfdfghrrt/socks.py
windows10-2004-x64
3hgfdfghrrt/socks.pyc
windows7-x64
3hgfdfghrrt/socks.pyc
windows10-2004-x64
3hgfdfghrrt/ssyn
ubuntu-18.04-amd64
1hgfdfghrrt/std
ubuntu-18.04-amd64
hgfdfghrrt/stealth
ubuntu-18.04-amd64
hgfdfghrrt/tcp
ubuntu-18.04-amd64
hgfdfghrrt...nal.py
windows7-x64
3hgfdfghrrt...nal.py
windows10-2004-x64
3hgfdfghrrt...al.pyc
windows7-x64
3hgfdfghrrt...al.pyc
windows10-2004-x64
3hgfdfghrrt...mer.py
ubuntu-18.04-amd64
3hgfdfghrrt...mer.py
debian-9-armhf
3Behavioral task
behavioral1
Sample
hgfdfghrrt/autorun
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
hgfdfghrrt/autorun
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
hgfdfghrrt/autorun
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
hgfdfghrrt/autorun
Resource
debian9-mipsel-20231215-en
Behavioral task
behavioral5
Sample
hgfdfghrrt/crontab
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral6
Sample
hgfdfghrrt/ghp
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral7
Sample
hgfdfghrrt/lag
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral8
Sample
hgfdfghrrt/layer7
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral9
Sample
hgfdfghrrt/mech.vbs
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
hgfdfghrrt/mech.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
hgfdfghrrt/mech.vbs
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
hgfdfghrrt/mech.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
hgfdfghrrt/run
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral14
Sample
hgfdfghrrt/run
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral15
Sample
hgfdfghrrt/run
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral16
Sample
hgfdfghrrt/run
Resource
debian9-mipsel-20231215-en
Behavioral task
behavioral17
Sample
hgfdfghrrt/s
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral18
Sample
hgfdfghrrt/skype
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral19
Sample
hgfdfghrrt/socks.py
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
hgfdfghrrt/socks.py
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
hgfdfghrrt/socks.pyc
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
hgfdfghrrt/socks.pyc
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
hgfdfghrrt/ssyn
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral24
Sample
hgfdfghrrt/std
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral25
Sample
hgfdfghrrt/stealth
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral26
Sample
hgfdfghrrt/tcp
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral27
Sample
hgfdfghrrt/terminal.py
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
hgfdfghrrt/terminal.py
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
hgfdfghrrt/terminal.pyc
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
hgfdfghrrt/terminal.pyc
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
hgfdfghrrt/torshammer.py
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral32
Sample
hgfdfghrrt/torshammer.py
Resource
debian9-armhf-20231215-en
General
-
Target
87b3a37633c7a17cddb0d594799d7e47
-
Size
167KB
-
MD5
87b3a37633c7a17cddb0d594799d7e47
-
SHA1
641698c6453a9b765a54a1c325d96c7ece93f635
-
SHA256
29a46b89182671ecd8dcfa38276360110f746ed88bc72885e15cae7328c33616
-
SHA512
b34fab90b6c1fd64cafd76f9215ab69787ec2c393620e6a453e8be2cfb9db9ff7c58ead1420035f9485e85d96b5f2e58f35bdfab279533cb118ed6c960e245b3
-
SSDEEP
3072:cl2IBnzN21gPYiyGQV7yVNjwoXluA0cJrguHvqp/gk94zQQ4gIAf9A4XIMx7kwUx:CfzN+MQ9yTjhcbarPPNk9gwgIArIkkVj
Malware Config
Signatures
-
Contains strings common to LOLSquad DDoS tools 1 IoCs
Resembles a range of public tools written in C intended for DDoS attacks.
resource yara_rule static1/unpack002/hgfdfghrrt/ssyn lolsquad_ddos
Files
-
87b3a37633c7a17cddb0d594799d7e47.gz
-
sample.tar
-
hgfdfghrrt/1
-
hgfdfghrrt/2
-
hgfdfghrrt/autorun.sh linux
-
hgfdfghrrt/cron.d
-
hgfdfghrrt/crontab.elf linux x86
-
hgfdfghrrt/fwd
-
hgfdfghrrt/ghp.elf linux x64
-
hgfdfghrrt/go
-
hgfdfghrrt/lag.elf linux x64
-
hgfdfghrrt/layer7.elf linux x64
-
hgfdfghrrt/mech.dir
-
hgfdfghrrt/mech.help.vbs
-
hgfdfghrrt/mech.levels
-
hgfdfghrrt/mech.pid
-
hgfdfghrrt/mech.session.vbs
-
hgfdfghrrt/mech.set
-
hgfdfghrrt/run.sh linux
-
hgfdfghrrt/s.elf linux x86
-
hgfdfghrrt/skype.elf linux x64
-
hgfdfghrrt/socks.py
-
hgfdfghrrt/socks.pyc
-
hgfdfghrrt/ssyn.elf linux x64
-
hgfdfghrrt/std.elf linux x86
-
hgfdfghrrt/stealth.elf linux x86
-
hgfdfghrrt/tcp.elf linux x86
-
hgfdfghrrt/terminal.py
-
hgfdfghrrt/terminal.pyc
-
hgfdfghrrt/torshammer.py.py .sh linux
-
hgfdfghrrt/tty.elf linux x86
-
hgfdfghrrt/udp.elf linux x64
-
hgfdfghrrt/update.sh linux
-
hgfdfghrrt/v.elf linux x86
-
hgfdfghrrt/v2.elf linux x86
-
hgfdfghrrt/x.sh linux