General

  • Target
    jaffacakes118_5de642254997f98f739385c3101e1339bd44f559fe4bec3bf4da70a15ccb4f80
  • Size 611KB
  • Sample261006-h5f1batakd
  • SHA256 5de642254997f98f739385c3101e1339bd44f559fe4bec3bf4da70a15ccb4f80
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • xorddos

C2
  • http://aa.hostasa.org/config.rar

  • img.imagetw0.com:53

  • bbs.markerbio.com:53

Attributes
  • crc_polynomial

    EDB88320

xor.plain

Signatures

  • Family: XorDDoS

    Botnet and downloader malware targeting Linux-based operating systems and IoT devices.

  • XorDDoS payload 1 IoCs

File Explorer

  • jaffacakes118_5de642254997f98f739385c3101e1339bd44f559fe4bec3bf4da70a15ccb4f80
    .elf 611KB

jaffacakes118_5de642254997f98f739385c3101e1339bd44f559fe4bec3bf4da70a15ccb4f80

  • SHA256 5de642254997f98f739385c3101e1339bd44f559fe4bec3bf4da70a15ccb4f80
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • XorDDoS payload