General

  • Target
    tmpv5wqicgn
  • Size 549KB
  • Sample260602-adfapsax4r
  • SHA256 4f02cc4d5426b63e3eca3ada3c9a8a111a952c0e373c5500519ea8eea5ade853
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • xorddos

C2
  • www.imagetw0.com:889

  • www.myserv012.com:889

  • http://qq.com/lib.asp

Attributes
  • crc_polynomial

    CDB88320

xor.plain

Signatures

  • Family: XorDDoS

    Botnet and downloader malware targeting Linux-based operating systems and IoT devices.

  • XorDDoS payload 1 IoCs

File Explorer

  • tmpv5wqicgn
    .elf 549KB

tmpv5wqicgn

  • SHA256 4f02cc4d5426b63e3eca3ada3c9a8a111a952c0e373c5500519ea8eea5ade853
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • XorDDoS payload