Behavioral task
behavioral1
Sample
8a9295908c1c4a948f3cbf553be30c29_JaffaCakes118
Resource
ubuntu2204-amd64-20240522.1-en
ubuntu-22.04-amd64
0 signatures
150 seconds
General
-
Target
8a9295908c1c4a948f3cbf553be30c29_JaffaCakes118
-
Size
611KB
-
MD5
8a9295908c1c4a948f3cbf553be30c29
-
SHA1
5f09e7f43596456736dba244aa9199951a2326a4
-
SHA256
b4e7c93ad0ead0fc33bc16343657b69ddb92ee8518f92e649647ccbc73a2cc9a
-
SHA512
7c6694988cbdee45db0f84166fb9154f44e02a9f2d89e7c07b467286c6a0d8b3f433bceeb6ba026f4889b9643e8a18cb738aea60c88e043a8e33741e590ed8b4
-
SSDEEP
12288:FBXOvdwV1/n/dQFhWlH/c1dHo4h9L+zNZrrgT6yF8EEP4UlUuTh1AG:FBXmkN/+Fhu/Qo4h9L+zNNgBVEBl/91h
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
http://aa.hostasa.org/config.rar
cdn.cloud2cdn.com:3308
Attributes
-
crc_polynomial
EDB88320
xor.plain
Signatures
-
XorDDoS payload 1 IoCs
Processes:
resource yara_rule sample family_xorddos -
Xorddos family
Files
-
8a9295908c1c4a948f3cbf553be30c29_JaffaCakes118.elf linux x86