General

  • Target

    8a9295908c1c4a948f3cbf553be30c29_JaffaCakes118

  • Size

    611KB

  • MD5

    8a9295908c1c4a948f3cbf553be30c29

  • SHA1

    5f09e7f43596456736dba244aa9199951a2326a4

  • SHA256

    b4e7c93ad0ead0fc33bc16343657b69ddb92ee8518f92e649647ccbc73a2cc9a

  • SHA512

    7c6694988cbdee45db0f84166fb9154f44e02a9f2d89e7c07b467286c6a0d8b3f433bceeb6ba026f4889b9643e8a18cb738aea60c88e043a8e33741e590ed8b4

  • SSDEEP

    12288:FBXOvdwV1/n/dQFhWlH/c1dHo4h9L+zNZrrgT6yF8EEP4UlUuTh1AG:FBXmkN/+Fhu/Qo4h9L+zNNgBVEBl/91h

Score
10/10

Malware Config

Extracted

Family

xorddos

C2

http://aa.hostasa.org/config.rar

cdn.cloud2cdn.com:3308

Attributes
  • crc_polynomial

    EDB88320

xor.plain

Signatures

  • XorDDoS payload 1 IoCs
  • Xorddos family

Files

  • 8a9295908c1c4a948f3cbf553be30c29_JaffaCakes118
    .elf linux x86