General

  • Target
    024fbf4b2685736ef0b1bfe8ae62cee0a6ce3da526a7aba21c8c736c993412d8.elf
  • Size 535KB
  • Sample250103-rsefdsymes
  • SHA256 024fbf4b2685736ef0b1bfe8ae62cee0a6ce3da526a7aba21c8c736c993412d8
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • xorddos

C2
  • http://aa.hostasa.org/config.rar

  • ppp.gggatat456.com:1522

  • ppp.xxxatat456.com:1522

  • www1.gggatat456.com:1522

Attributes
  • crc_polynomial

    EDB88320

xor.plain

Signatures

  • XorDDoS payload 1 IoCs
  • Xorddos family

File Explorer

  • 024fbf4b2685736ef0b1bfe8ae62cee0a6ce3da526a7aba21c8c736c993412d8.elf
    .elf 535KB

024fbf4b2685736ef0b1bfe8ae62cee0a6ce3da526a7aba21c8c736c993412d8.elf

  • SHA256 024fbf4b2685736ef0b1bfe8ae62cee0a6ce3da526a7aba21c8c736c993412d8
  • MD5 SHA1 SHA512 SSDEEP
  • XorDDoS payload