Extracted

• • Target

    1e87a5dba16588bf91144de1b34a524bc70c39c88bca63f79dd95d3087253d72.elf

  • Size

    611KB

  • MD5

    e7a3aa891e550834f9af4367a564e468

  • SHA1

    38962368d0b3ea97126372410b101a19c8130532

  • SHA256

    1e87a5dba16588bf91144de1b34a524bc70c39c88bca63f79dd95d3087253d72

  • SHA512

    7f5257d7316a864f63ee2b8fed51f97d55ad1b5c1db458a93a57b0cfde0694ff186ef576f9e8c76c96721def61877a0072c51ca7bf5dc5b1dd0b097135c2e9da

  • SSDEEP

    12288:FBXOvdwV1/n/dQFhWlH/c1dHo4h9L+zNZrrUT6yF8EEP4UlUuTh1AG:FBXmkN/+Fhu/Qo4h9L+zNNUBVEBl/91h

  Score

  10^/10

  xorddosbotnetdiscoverydownloaderexecutionpersistenceprivilege_escalationrootkit

  • XorDDoS

    Botnet and downloader malware targeting Linux-based operating systems and IoT devices.

    botnetdownloaderxorddos

  • XorDDoS payload

  • Xorddos family

    xorddos

  • Writes memory of remote process

  • Loads a kernel module

    Loads a Linux kernel module, potentially to achieve persistence

    rootkit

  • Creates/modifies Cron job

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    executionpersistenceprivilege_escalation
  behavioral1