Behavioral task
behavioral1
Sample
112
Resource
ubuntu1804-amd64-20231215-en
ubuntu-18.04-amd64
12 signatures
150 seconds
General
-
Target
112
-
Size
549KB
-
MD5
f9191bab1e834d4aef3380700639cee9
-
SHA1
9c20269df6694260a24ac783de2e30d627a6928a
-
SHA256
ea40ecec0b30982fbb1662e67f97f0e9d6f43d2d587f2f588525fae683abea73
-
SHA512
3d2758fe2d06183e627b5cc24919c08c84108f2efd7ab0a162029d55537476410d9535d50f3eb059f7153f7482c134284862eea121201f82838aace4b12283b5
-
SSDEEP
12288:VeRvuKqiVZ4En5drNK0pPEfJKlHZ8mG97Qxee6yzmx:VIv/qiVNHNDEfJKHZ8mG9QeeO
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
api.markerbio.com:112
api.enoan2107.com:112
http://qq.com/lib.asp
Attributes
-
crc_polynomial
CDB88320
xor.plain
Signatures
-
XorDDoS payload 1 IoCs
Processes:
resource yara_rule sample family_xorddos -
Xorddos family
Files
-
112.elf linux x86