Behavioral task
behavioral1
Sample
76741721aede86e5d9a78da5dd349cc7f418a993eba77457c00b27aa627f9882.elf
Resource
ubuntu2004-amd64-20240221-en
ubuntu-20.04-amd64
14 signatures
150 seconds
General
-
Target
455b46bf3f93b8853137de2b99ef0f4c.bin
-
Size
257KB
-
MD5
b614eddce18a5272852d3d01a7448078
-
SHA1
bcd7fbd3b9a6c976a754c627168a921c27940a02
-
SHA256
ae38c170144317b0f8e3e0a761085431e18d2eac562622880a6d8e83fd4dee88
-
SHA512
af81ca863457d86379d90eb4cf4a9d6fd5924e6c7d8c69e1c59e46566fa1fd41cc728e85c79164ca4cdfc8c925dbece67cd3e1dff0388bca9949740e1320a94f
-
SSDEEP
6144:ampXERvHw0JULkgwnDoiZDIBXPU3Ym1AAe0K/4K1FmDs5T:a2XERvQzL6DoiGB/VmG0vs3V
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
bb.markerbio.com:13307
bb.myserv012.com:13307
http://qq.com/lib.asp
Attributes
-
crc_polynomial
CDB88320
xor.plain
Signatures
-
XorDDoS payload 1 IoCs
Processes:
resource yara_rule static1/unpack001/76741721aede86e5d9a78da5dd349cc7f418a993eba77457c00b27aa627f9882.elf family_xorddos -
Xorddos family
Files
-
455b46bf3f93b8853137de2b99ef0f4c.bin.zip
Password: infected
-
76741721aede86e5d9a78da5dd349cc7f418a993eba77457c00b27aa627f9882.elf.elf linux x86