Behavioral task
behavioral1
Sample
a15e9d2d69c1407ac5b42ba46d71fc58
Resource
ubuntu1804-amd64-20231215-en
ubuntu-18.04-amd64
9 signatures
150 seconds
General
-
Target
a15e9d2d69c1407ac5b42ba46d71fc58
-
Size
603KB
-
MD5
a15e9d2d69c1407ac5b42ba46d71fc58
-
SHA1
5a124a3a2f363bd3740ab792044d9a06dc4256d5
-
SHA256
7aa8eab2f01783bfe9bb7d8e051baebf563629645d73b2af42022d28a8143179
-
SHA512
f38eeae08e03f19339d03b01a271df14284bd22194887b492c24f6e4c89ef7b416507350cab6a5de8d90084519703b78cd844f35a54a4fa13b8643f0c6a395c5
-
SSDEEP
12288:R40XBrnlTCbI5ZBP5IePtqLn4yFeC+oT6ygF9b4elMuThmVF:e01tCbqNNPtqLn4yFmoEbdlH9mn
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
http://info1.3000uc.com/b/u.php
gh.dsaj2a1.org:2822
www.wangzongfacai.com:2822
174.139.217.145:2822
Attributes
-
crc_polynomial
EDB88320
xor.plain
Signatures
-
XorDDoS payload 1 IoCs
Processes:
resource yara_rule sample family_xorddos -
Xorddos family
Files
-
a15e9d2d69c1407ac5b42ba46d71fc58.elf linux x86