General

  • Target

    e9db2bcc3678779114f8ed31c875cbd3

  • Size

    604KB

  • MD5

    e9db2bcc3678779114f8ed31c875cbd3

  • SHA1

    1e20fe93f4926d431561ccc1ecb2c576d8c7ba4f

  • SHA256

    2f20b41d601bde086a823e505ae0c1d6cfd3d40469373963ec3e15cd8df3baba

  • SHA512

    c36b28078cb7c10d5fabb489a6fc19b9c856d1047cdb164191dc39ecf1d4a41c75d3e0e1591d2cf339388d943cf6966dbcc2fbd5da73c89eee7876e8a3834711

  • SSDEEP

    12288:IiqKgqkonFOSC3pZWKqAKSj6LJXDv42Hv6yrDKb4olUuThTcF:S1qPkSCvnvKSj6LJXDrHzDsl/9TE

Score
10/10

Malware Config

Extracted

Family

xorddos

C2

103.25.9.245:8002

103.240.141.50:8002

66.102.253.30:8002

ndns.dsaj2a1.org:8002

ndns.dsaj2a.org:8002

ndns.hcxiaoao.com:8002

ndns.dsaj2a.com:8002

Attributes
  • crc_polynomial

    EDB88320

xor.plain

Signatures

  • XorDDoS payload 1 IoCs
  • Xorddos family

Files

  • e9db2bcc3678779114f8ed31c875cbd3
    .elf linux x86