Behavioral task
behavioral1
Sample
694a672878a1f7945c020a0a3ca74367.elf
Resource
ubuntu1804-amd64-20240226-en
ubuntu-18.04-amd64
8 signatures
150 seconds
General
-
Target
694a672878a1f7945c020a0a3ca74367.elf
-
Size
535KB
-
MD5
694a672878a1f7945c020a0a3ca74367
-
SHA1
148caeaa8ac7fdf46d48fc2d1d0020d1bf41d442
-
SHA256
75bfd448e4274cc4e5804c43768f62a36ccb3fc3b1df06e14d9c892daa2cde19
-
SHA512
a239845b91d64b8559192e4683e2faa16ad0c8987bfc142cf692f620bd5fefa0d8d0bbe2e7f5f59651435eec4350e3574171d33e7cd4656136b539bccd00fb60
-
SSDEEP
12288:4Ufrcn+vwK5ripVU4tdZ1pNL/pVbzP66ySjQn36Eoj:/fUywKQ7Fb1pNL/p5PfjQn36Eu
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
https://ww.aass654.com/config.rar
ee.aass654.com:1520
ee.xxcc789.com:1520
ee.vvbb321.com:1520
ee.jjkk567.com:1520
ee.nnmm234.com:1520
Attributes
-
crc_polynomial
EDB88320
xor.plain
Signatures
-
XorDDoS payload 1 IoCs
Processes:
resource yara_rule sample family_xorddos -
Xorddos family
Files
-
694a672878a1f7945c020a0a3ca74367.elf.elf linux x86