Behavioral task
behavioral1
Sample
f45232c67ef011ef988747e6d9bbb443_JaffaCakes118
Resource
ubuntu2004-amd64-20240508-en
ubuntu-20.04-amd64
12 signatures
150 seconds
General
-
Target
f45232c67ef011ef988747e6d9bbb443_JaffaCakes118
-
Size
611KB
-
MD5
f45232c67ef011ef988747e6d9bbb443
-
SHA1
4d7f2efa2762d3a6016a3b1ab4df4c20992da511
-
SHA256
5022e32cf32a67337aec601a2078c7194c80d196c18a5e972ed6f23c276fd03f
-
SHA512
6a5bb40f6250c24e33367fd262f34da7b06355e3304ca6c442ee1ba9b0efbff58ecc90a9a0bec96483cec809796fcb31610380f5a36f745fd80ca642a3f94725
-
SSDEEP
12288:FBXOvdwV1/n/dQFhWlH/c1dHo4h9L+zNZrriT6yF8EEP4UlUuTh1AG:FBXmkN/+Fhu/Qo4h9L+zNNiBVEBl/91h
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
http://www.gzcfr5axf6.com/config.rar
bbb.wordpressau.com:3007
Attributes
-
crc_polynomial
EDB88320
xor.plain
Signatures
-
XorDDoS payload 1 IoCs
Processes:
resource yara_rule sample family_xorddos -
Xorddos family
Files
-
f45232c67ef011ef988747e6d9bbb443_JaffaCakes118.elf linux x86