Behavioral task
behavioral1
Sample
malware
Resource
debian12-armhf-20240221-en
Behavioral task
behavioral2
Sample
malware
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
malware
Resource
ubuntu2204-amd64-20250307-en
Behavioral task
behavioral4
Sample
malware
Resource
ubuntu2404-amd64-20250307-en
General
-
Target
malware
-
Size
542KB
-
MD5
c77b5dbffd05dd733b608cee21b1d4a0
-
SHA1
d1cb77973c4a6e23aebc5bdb053ad3289960a86b
-
SHA256
fee023e78183af702d8f57bdbfda2ded848cfa88acae2abb4d63aa24fe30c951
-
SHA512
7c95d9bf5729897fa037b37aedf1242f10129982dd3e09422c008f8ee07bf9f91adb902334faa987f8c4af2d762553fd4ac07ae5d5d008c34d510375689fdf71
-
SSDEEP
12288:VB2bw1CH/FwznbIU9sE8c8lqd49N94wT4JXhLLp6yWrk3k:VB2WCH/eMU9Uc8gd49N94BJXhLL4ruk
Malware Config
Extracted
xorddos
http://ww.wowapplecar.com/config.rar
ee.vvbb321.com:1520
ee.jjkk567.com:1520
ee.nnmm234.com:1520
ee.aass654.com:1520
ee.xxcc789.com:1520
-
crc_polynomial
EDB88320
Signatures
-
XorDDoS payload 1 IoCs
resource yara_rule sample family_xorddos -
Xorddos family
Files
-
malware.elf linux x86