Behavioral task
behavioral1
Sample
3765193e92c10eab1dc09a2c89857734_JaffaCakes118
Resource
ubuntu2004-amd64-20240729-en
ubuntu-20.04-amd64
10 signatures
150 seconds
General
-
Target
3765193e92c10eab1dc09a2c89857734_JaffaCakes118
-
Size
610KB
-
MD5
3765193e92c10eab1dc09a2c89857734
-
SHA1
6bb8b7eb78646a88a0bf1a9067ea4998fff4de06
-
SHA256
c3ca04f3ea1f643ec2e04117efbcba263646307732b3ea1a27fa0cdb038651ac
-
SHA512
01f7ad629ef40fd55f47d25ecc969c42297583668967c21a10512cfccfb5e07402a61d56716954ecf8c29e49eb44e7aa69293f0ca5a72b55d87c5dbe39d7141c
-
SSDEEP
12288:WBmHsnhar0nJ7FGY5HRYxC1mqiL40qFCWU7k/gU6yZNnXgW4UlUuTh1AG:WBmHgaUVFGAR11mTL40q/qGpXgUl/91h
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
http://www1.gggatat456.com/dd.rar
ppp.gggatat456.com:1523
ppp.xxxatat456.com:1523
Attributes
-
crc_polynomial
EDB88320
xor.plain
Signatures
-
XorDDoS payload 1 IoCs
Processes:
resource yara_rule sample family_xorddos -
Xorddos family
Files
-
3765193e92c10eab1dc09a2c89857734_JaffaCakes118.elf linux x86