SYMBOLCOMMON_NAMEaka. SYNONYMS
elf.chalubo (Back to overview)

Chalubo

aka: ChaChaDDoS

Sophos describes this malware as a DDoS bot, with its name originating from ChaCha-Lua-bot due to its use of ChaCha cipher and Lua. Variants exist for multiple architectures and it incorporates code from XorDDoS and Mirai.

References
2024-05-30CenturylinkBlack Lotus Labs
The Pumpkin Eclipse
Chalubo
2024-05-30LumenBlack Lotus Labs
The Pumpkin Eclipse
Chalubo
2018-10-22SophosLabs UncutTimothy Easton
Chalubo botnet wants to DDoS from your server or IoT device
Chalubo

There is no Yara-Signature yet.