Back to Malware Drops
248f47bd17ba0a02a5c093885604e22949b68833e0692fe6a07ae627108ac4db
MD5cbc55708ef7078e69ac1c1e7f86062b8
SSDEEP—
File Typetext/x-script
Size2.2 KB
Sources12
Downloads0
First SeenDec 26, 2022
Last SeenDec 26, 2022
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (8)
- a-r[.]m-4[.]Fourloko
- a-r[.]m-5[.]Fourloko
- a-r[.]m-6[.]Fourloko
- a-r[.]m-7[.]Fourloko
- i-5[.]8-6[.]Fourloko
- m-6[.]8-k[.]Fourloko
- m-i[.]p-s[.]Fourloko
- m-p[.]s-l[.]Fourloko
ipv4 (1)
- 45[.]140[.]190[.]153
url (12)
- hxxp://45[.]140[.]190[.]153/a-r[.]m-4[.]Fourloko;
- hxxp://45[.]140[.]190[.]153/a-r[.]m-5[.]Fourloko;
- hxxp://45[.]140[.]190[.]153/a-r[.]m-6[.]Fourloko;
- hxxp://45[.]140[.]190[.]153/a-r[.]m-7[.]Fourloko;
- hxxp://45[.]140[.]190[.]153/i-5[.]8-6[.]Fourloko;
- hxxp://45[.]140[.]190[.]153/m-6[.]8-k[.]Fourloko;
- hxxp://45[.]140[.]190[.]153/m-i[.]p-s[.]Fourloko;
- hxxp://45[.]140[.]190[.]153/m-p[.]s-l[.]Fourloko;
- hxxp://45[.]140[.]190[.]153/p-p[.]c-[.]Fourloko;
- hxxp://45[.]140[.]190[.]153/s-h[.]4-[.]Fourloko;
- hxxp://45[.]140[.]190[.]153/x-3[.]2-[.]Fourloko;
- hxxp://45[.]140[.]190[.]153/x-8[.]6-[.]Fourloko;