Behavioral task
behavioral1
Sample
3b614f5f8145fa12d8ab1adaf46dd252_JaffaCakes118
Resource
ubuntu2004-amd64-20240508-en
ubuntu-20.04-amd64
10 signatures
150 seconds
General
-
Target
3b614f5f8145fa12d8ab1adaf46dd252_JaffaCakes118
-
Size
647KB
-
MD5
3b614f5f8145fa12d8ab1adaf46dd252
-
SHA1
cca3b65a7f388f74b34d149b90c73411783a2e4e
-
SHA256
ed03a03a98f1b157c0b2eda15f9669f3e2f24262d329313542d9a4e6e34188d4
-
SHA512
6507ce97950bb4bcc0f628192d6f0a4aa9e3071f6dbb899e57218671ccc2a13703fad009ca152fb72b8528649c5c548d1e286b8f52045de472d436b33116ee05
-
SSDEEP
12288:RBRO1UmJJ0nHgBL9YfJip2qm+x4h1Ton3p6y07l7mtBDvnD/u9hMHDB:RBRpmJ+HyL9AiAqm+x4h1m36wvnDWXMN
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
http://info1.3000uc.com/b/u.php
benniaogg.benniao.date:2000
8u.yesoday.com:7770
8u2.yesoday.com:7771
Attributes
-
crc_polynomial
EDB88320
xor.plain
Signatures
-
XorDDoS payload 1 IoCs
Processes:
resource yara_rule sample family_xorddos -
Xorddos family
Files
-
3b614f5f8145fa12d8ab1adaf46dd252_JaffaCakes118.elf linux x86