Overview

overview

10

Static

static

10

tmpj4e7cjen

windows10-ltsc_2021-x64

1

tmpj4e7cjen

windows10-2004-x64

1

tmpj4e7cjen

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    tmpj4e7cjen
  • Size 611KB
  • Sample260602-acfvvahs9x
  • SHA256 86a8a2107448d28214e43a86e1367feec9e7f45201a3013c57bc200bf760e1ee
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
botnetdownloaderxorddos

Malware Config

Extracted

Family

  • xorddos

C2

  • http://aa.finance1num.org/config.rar

  • cdn.netflix2cdn.com:80

  • cdn.finance1num.com:80

Attributes
  • crc_polynomial

    EDB88320

xor.plain

Signatures

  • Family: XorDDoS

    Botnet and downloader malware targeting Linux-based operating systems and IoT devices.

    botnetdownloaderxorddos
  • XorDDoS payload 1 IoCs

File Explorer

  • tmpj4e7cjen
    .elf 611KB

tmpj4e7cjen

  • SHA256 86a8a2107448d28214e43a86e1367feec9e7f45201a3013c57bc200bf760e1ee
  • MD5 SHA1 SHA512 SSDEEP TLSH
linuxx86

  • XorDDoS payload