Overview
overview
10Static
static
10ZxCDDoS-main.zip
windows7-x64
1ZxCDDoS-main.zip
windows10-2004-x64
1ZxCDDoS-ma...UP-TCP
ubuntu-24.04-amd64
1ZxCDDoS-ma...AND.js
windows7-x64
3ZxCDDoS-ma...AND.js
windows10-2004-x64
3ZxCDDoS-ma...RAW.js
windows7-x64
3ZxCDDoS-ma...RAW.js
windows10-2004-x64
3ZxCDDoS-ma...KET.js
windows7-x64
3ZxCDDoS-ma...KET.js
windows10-2004-x64
3ZxCDDoS-main/Hulk.js
windows7-x64
3ZxCDDoS-main/Hulk.js
windows10-2004-x64
3ZxCDDoS-ma...T-SLAM
ubuntu-24.04-amd64
1ZxCDDoS-main/OVERFLOW
ubuntu-24.04-amd64
1ZxCDDoS-main/OVH-AMP
ubuntu-24.04-amd64
1ZxCDDoS-main/OVH-BEAM
ubuntu-24.04-amd64
1ZxCDDoS-ma...DME.md
windows7-x64
3ZxCDDoS-ma...DME.md
windows10-2004-x64
3ZxCDDoS-ma...OSPOOF
ubuntu-24.04-amd64
1ZxCDDoS-ma...al.txt
windows7-x64
1ZxCDDoS-ma...al.txt
windows10-2004-x64
1ZxCDDoS-ma...BYPASS
ubuntu-24.04-amd64
1ZxCDDoS-ma...ass.py
windows7-x64
3ZxCDDoS-ma...ass.py
windows10-2004-x64
3ZxCDDoS-ma...aes.js
windows7-x64
3ZxCDDoS-ma...aes.js
windows10-2004-x64
3ZxCDDoS-ma...ypt.js
windows7-x64
3ZxCDDoS-ma...ypt.js
windows10-2004-x64
3ZxCDDoS-ma...ast.js
windows7-x64
3ZxCDDoS-ma...ast.js
windows10-2004-x64
3ZxCDDoS-ma...ine.js
windows7-x64
3ZxCDDoS-ma...ine.js
windows10-2004-x64
3ZxCDDoS-ma...are.js
windows7-x64
3Behavioral task
behavioral1
Sample
ZxCDDoS-main.zip
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ZxCDDoS-main.zip
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
ZxCDDoS-main/100UP-TCP
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral4
Sample
ZxCDDoS-main/HTTP-RAND.js
Resource
win7-20240508-en
Behavioral task
behavioral5
Sample
ZxCDDoS-main/HTTP-RAND.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral6
Sample
ZxCDDoS-main/HTTP-RAW.js
Resource
win7-20240221-en
Behavioral task
behavioral7
Sample
ZxCDDoS-main/HTTP-RAW.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral8
Sample
ZxCDDoS-main/HTTP-SOCKET.js
Resource
win7-20240221-en
Behavioral task
behavioral9
Sample
ZxCDDoS-main/HTTP-SOCKET.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral10
Sample
ZxCDDoS-main/Hulk.js
Resource
win7-20240508-en
Behavioral task
behavioral11
Sample
ZxCDDoS-main/Hulk.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral12
Sample
ZxCDDoS-main/MINECRAFT-SLAM
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral13
Sample
ZxCDDoS-main/OVERFLOW
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral14
Sample
ZxCDDoS-main/OVH-AMP
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral15
Sample
ZxCDDoS-main/OVH-BEAM
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral16
Sample
ZxCDDoS-main/README.md
Resource
win7-20240508-en
Behavioral task
behavioral17
Sample
ZxCDDoS-main/README.md
Resource
win10v2004-20240508-en
Behavioral task
behavioral18
Sample
ZxCDDoS-main/STD-NOSPOOF
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral19
Sample
ZxCDDoS-main/Tutorial.txt
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
ZxCDDoS-main/Tutorial.txt
Resource
win10v2004-20240426-en
Behavioral task
behavioral21
Sample
ZxCDDoS-main/UDPBYPASS
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral22
Sample
ZxCDDoS-main/bypass.py
Resource
win7-20240419-en
Behavioral task
behavioral23
Sample
ZxCDDoS-main/bypass.py
Resource
win10v2004-20240508-en
Behavioral task
behavioral24
Sample
ZxCDDoS-main/bypasses/aes.js
Resource
win7-20240508-en
Behavioral task
behavioral25
Sample
ZxCDDoS-main/bypasses/aes.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral26
Sample
ZxCDDoS-main/bypasses/bfcrypt.js
Resource
win7-20240508-en
Behavioral task
behavioral27
Sample
ZxCDDoS-main/bypasses/bfcrypt.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral28
Sample
ZxCDDoS-main/bypasses/blazingfast.js
Resource
win7-20231129-en
Behavioral task
behavioral29
Sample
ZxCDDoS-main/bypasses/blazingfast.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral30
Sample
ZxCDDoS-main/bypasses/browser_engine.js
Resource
win7-20240221-en
Behavioral task
behavioral31
Sample
ZxCDDoS-main/bypasses/browser_engine.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral32
Sample
ZxCDDoS-main/bypasses/cloudflare.js
Resource
win7-20240215-en
General
-
Target
ZxCDDoS-main.zip
-
Size
2.0MB
-
MD5
b7464f96f1affeecf5978f99dbac57d8
-
SHA1
4d83b08b1084b073badb8f67339cebcae77f3cfd
-
SHA256
bd3a2c0760b5a686fa8d8f69ca86325cd0c240fc5ae9b403cab9572a7c48cb10
-
SHA512
e235b0c1869c7234485fd888110848e1b01206d95a8a1202a95809dfa62e2e32e57a3f28d1fcce2239896b4ad5472c98393b8052f14efad39554bb9beb4926a8
-
SSDEEP
49152:vi/6JW6PsVdY0VCNBY/uW04MP6HzE+yaGFqqiTsTHq88G:qGkVdY0VCNBY/uVFyHOfFFD8G
Malware Config
Signatures
-
Contains strings common to LOLSquad DDoS tools 1 IoCs
Resembles a range of public tools written in C intended for DDoS attacks.
resource yara_rule static1/unpack001/ZxCDDoS-main/nfo-killer lolsquad_ddos
Files
-
ZxCDDoS-main.zip.zip
-
ZxCDDoS-main/100UP-TCP.elf linux x64
-
ZxCDDoS-main/HTTP-RAND.js.js
-
ZxCDDoS-main/HTTP-RAW.js.js
-
ZxCDDoS-main/HTTP-SOCKET.js.js
-
ZxCDDoS-main/Hulk.go.js
-
ZxCDDoS-main/MINECRAFT-SLAM.elf linux x64
-
ZxCDDoS-main/OVERFLOW.elf linux x64
-
ZxCDDoS-main/OVH-AMP.elf linux x64
-
ZxCDDoS-main/OVH-BEAM.elf linux x64
-
ZxCDDoS-main/README.md
-
ZxCDDoS-main/STD-NOSPOOF.elf linux x64
-
ZxCDDoS-main/Tutorial.txt
-
ZxCDDoS-main/UDPBYPASS.elf linux x64
-
ZxCDDoS-main/bypass.py
-
ZxCDDoS-main/bypasses/aes.js.js
-
ZxCDDoS-main/bypasses/bfcrypt.js.js
-
ZxCDDoS-main/bypasses/blazingfast.js.js
-
ZxCDDoS-main/bypasses/browser_engine.js.js
-
ZxCDDoS-main/bypasses/cloudflare.js.js
-
ZxCDDoS-main/bypasses/ddosguard.js.js
-
ZxCDDoS-main/bypasses/index.js
-
ZxCDDoS-main/bypasses/ovh.js
-
ZxCDDoS-main/bypasses/pipeguard.js
-
ZxCDDoS-main/bypasses/privacypass.js.js
-
ZxCDDoS-main/bypasses/stormwall.js.js
-
ZxCDDoS-main/bypasses/sucuri.js.js
-
ZxCDDoS-main/c2.py
-
ZxCDDoS-main/cf-pro.py
-
ZxCDDoS-main/cf.js.js
-
ZxCDDoS-main/destroy.pl.pl .sh linux
-
ZxCDDoS-main/flux.elf linux x64
-
ZxCDDoS-main/god.pl.pl .sh linux
-
ZxCDDoS-main/header.txt
-
ZxCDDoS-main/home.pl.pl .sh linux
-
ZxCDDoS-main/http.txt
-
ZxCDDoS-main/httpflood.go
-
ZxCDDoS-main/https-spoof.py
-
ZxCDDoS-main/hyper.js.js
-
ZxCDDoS-main/ldap.elf linux x64
-
ZxCDDoS-main/ldap.txt
-
ZxCDDoS-main/nfo-killer.elf linux x64
-
ZxCDDoS-main/ntp.elf linux x64
-
ZxCDDoS-main/ntp.txt
-
ZxCDDoS-main/ovh-raw.elf linux x64
-
ZxCDDoS-main/ovhamp.txt
-
ZxCDDoS-main/proxies.txt
-
ZxCDDoS-main/requirements.txt
-
ZxCDDoS-main/samp.py
-
ZxCDDoS-main/script.pl.pl .sh linux
-
ZxCDDoS-main/slow.js.js
-
ZxCDDoS-main/slowloris.elf linux x64
-
ZxCDDoS-main/socks.txt
-
ZxCDDoS-main/std.elf linux x64
-
ZxCDDoS-main/stress.go
-
ZxCDDoS-main/ua.txt
-
ZxCDDoS-main/uambypass.js.js
-
ZxCDDoS-main/udp.py.py .sh linux