Back to Malware Drops

2b2e7aaf02e027200db1ebbc9e08cd466ceeee307fbaff27b105737afc7cb019

MD50234eedf1111e41be2cbe13360c75091
SSDEEP96:1j9jwIjYjyDK/DZD8jH+k1JvJADh/pRs1siszbGD:1j9jhjYjWK/lyH+kJRADh/pm1sisfGD
File Typeunknown
Size4.2 KB
Sources1
Downloads0
First SeenDec 18, 2021
Last SeenDec 18, 2021
Download sample (.zip, password: infected)

Live malware — handle only in an isolated analysis environment.

Originating Attacks

Honeypot sessions that dropped this sample. Drop URLs are defanged; commands are shown verbatim and are not links.

Indicators of Compromise

Values are defanged (e.g. hxxp://, [.]) — not live links.

domain (1)

  • www[.]cloudflare[.]com

ipv4 (1)

  • 64[.]227[.]8[.]165

url (1)

  • hxxps://www[.]cloudflare[.]com/5xx-error-landing