Back to Malware Drops
2220783661db230d0808a5750060950688e2618d462ccbe07f54408154c227c1
MD52cf90bf5b61d605c116ce4715551b7a3
SSDEEP384:v0FINvSo5o/DhIoq47z2YEEFXBTBfZ4zLZP1hncu/tpbOfvuy/97M8T:YCmIoq47z2YEmXBTBshvbSZX
File Typetext/x-script
Size41.6 KB
Sources265
Downloads0
First SeenDec 15, 2022
Last SeenDec 15, 2022
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (5)
- cmd[.]exe
- flood[.]ro
- gsm[.]ftp[.]sh
- HSBC[.]users[.]undernet[.]org
- K[.]Mardam
url (1)
- hxxp://([^/: