Behavioral task
behavioral1
Sample
c10ffeaf668f69c1124f6cd5fe0dff3b
Resource
ubuntu1804-amd64-20231222-en
ubuntu-18.04-amd64
9 signatures
150 seconds
General
-
Target
c10ffeaf668f69c1124f6cd5fe0dff3b
-
Size
595KB
-
MD5
c10ffeaf668f69c1124f6cd5fe0dff3b
-
SHA1
99b10f29a401f8846b1b94b0906ff9bad8128117
-
SHA256
292adb2a5917259e10fbfce5e936f993dad8bf1d813e3b9d5d9c9bf4ea4b8037
-
SHA512
1040df753d9a4c27cbcba709a5ac3120a001cac78803103c639c0506bfefa13836910baa391c17dd6123c494dc2fcea0a23202488306b8455eedae3072673f74
-
SSDEEP
12288:9bf8IKMnQXbeyFlGF/5oYAx//tqdx286yNrMu9h7Dxu9hc7L:tf8INobe0kxoYAx//tQ26TzD4XcP
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
http://info1.3000uc.com/b/u.php
gh.dsaj2a1.org:2822
www.wangzongfacai.com:2822
174.139.217.145:2822
Attributes
-
crc_polynomial
EDB88320
xor.plain
Signatures
-
XorDDoS payload 1 IoCs
Processes:
resource yara_rule sample family_xorddos -
Xorddos family
Files
-
c10ffeaf668f69c1124f6cd5fe0dff3b.elf linux x86