Behavioral task
behavioral1
Sample
1.txt
Resource
ubuntu1804-amd64-20240226-en
ubuntu-18.04-amd64
8 signatures
1800 seconds
General
-
Target
1.txt
-
Size
535KB
-
MD5
f075a45d0f9159aca526e13870de7b28
-
SHA1
1f74f062b39def7ba488b1e5dfcd56fcb87c5768
-
SHA256
a544fa8b34122876e3e0140c480c967aad0b26d84823ae6fdd1bc961e47d8b15
-
SHA512
a8f3035f3b88f3c4250fc869b4890b4a5d3bcf1333c2a13a43c8f2a1775b828173787fc65ff04e48b9984e10f601a30c25a6c32a7114166e0b91ba14f3be3f50
-
SSDEEP
12288:4Ufrcn+vwK5ripVU4tdZ1pNL/pVbzD66ySjQn36Eoj:/fUywKQ7Fb1pNL/p5DfjQn36Eu
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
https://ww.aass654.com/config.rar
ff.aass654.com:1522
ff.xxcc789.com:1522
ff.vvbb321.com:1522
ff.jjkk567.com:1522
ff.nnmm234.com:1522
Attributes
-
crc_polynomial
EDB88320
xor.plain
Signatures
-
XorDDoS payload 1 IoCs
Processes:
resource yara_rule sample family_xorddos -
Xorddos family
Files
-
1.txt.elf linux x86