General
-
Target
libudev.so
-
Size
542KB
-
MD5
b51476351c030b45c982011e12be17d7
-
SHA1
9db5baba5f06bc3e6d5b78de1505eee915690148
-
SHA256
6ddf688bdf16a1d465aef954ff90b372dacd8162bac2c7797ff7b6b4f20afcbc
-
SHA512
6ee3c1cef54bf515ac07e6e0d2932e3eabe86dac80f546befff8d8a1f4de22b6dd95e91580306361dbc7af11bcfed6d421f739bc9b37e38665ef342007b0efe7
-
SSDEEP
12288:VB2bw1CH/FwznbIU9sE8c8lqd49N94wT4JXhLLp6yWrk3:VB2WCH/eMU9Uc8gd49N94BJXhLL4ru
Score
10/10
Malware Config
Extracted
Family
xorddos
C2
http://ww.wowapplecar.com/config.rar
ee.vvbb321.com:1520
ee.jjkk567.com:1520
ee.nnmm234.com:1520
ee.aass654.com:1520
ee.xxcc789.com:1520
Attributes
-
crc_polynomial
EDB88320
xor.plain
Signatures
-
XorDDoS payload 1 IoCs
-
Xorddos family
Files
-
libudev.so