General

  • Target
    tmpyke845oi
  • Size 611KB
  • Sample260525-ahn4eacz4z
  • SHA256 8ed19e85a5cd5fb0106e4066523fed1f8b100ef0ad557198fba10749cafabf1e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • xorddos

C2
  • http://www1.gggatat456.com/dd.rar

  • ppp.gggatat456.com:6001

  • ppp.xxxatat456.com:6001

  • ddd.dddgata789.com:6001

Attributes
  • crc_polynomial

    EDB88320

xor.plain

Signatures

  • Family: XorDDoS

    Botnet and downloader malware targeting Linux-based operating systems and IoT devices.

  • XorDDoS payload 1 IoCs

File Explorer

  • tmpyke845oi
    .elf 611KB

tmpyke845oi

  • SHA256 8ed19e85a5cd5fb0106e4066523fed1f8b100ef0ad557198fba10749cafabf1e
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • XorDDoS payload