Overview

overview

10

Static

static

10

tmpu6bcts6h

windows10-ltsc_2021-x64

1

tmpu6bcts6h

windows10-2004-x64

1

tmpu6bcts6h

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    tmpu6bcts6h
  • Size 603KB
  • Sample260601-3gl7msav7p
  • SHA256 7aa8eab2f01783bfe9bb7d8e051baebf563629645d73b2af42022d28a8143179
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
botnetdownloaderxorddos

Malware Config

Extracted

Family

  • xorddos

C2

  • http://info1.3000uc.com/b/u.php

  • gh.dsaj2a1.org:2822

  • www.wangzongfacai.com:2822

  • 174.139.217.145:2822

Attributes
  • crc_polynomial

    EDB88320

xor.plain

Signatures

  • Family: XorDDoS

    Botnet and downloader malware targeting Linux-based operating systems and IoT devices.

    botnetdownloaderxorddos
  • XorDDoS payload 1 IoCs

File Explorer

  • tmpu6bcts6h
    .elf 603KB

tmpu6bcts6h

  • SHA256 7aa8eab2f01783bfe9bb7d8e051baebf563629645d73b2af42022d28a8143179
  • MD5 SHA1 SHA512 SSDEEP TLSH
linuxx86

  • XorDDoS payload