Back to Malware Drops

34ff14fc4fdb5e38a4c9540b4384ccd2f3f5efa40de55e4e4a3a8d16e634273e

MD587b93e4e9fd79beea29ddb5e51b259e3
SSDEEP
File Typetext/x-script
Size1.5 KB
Sources191
Downloads0
First SeenAug 6, 2023
Last SeenAug 6, 2023
Download sample (.zip, password: infected)

Live malware — handle only in an isolated analysis environment.

Indicators of Compromise

Values are defanged (e.g. hxxp://, [.]) — not live links.

ipv4 (1)

  • 51[.]15[.]112[.]248

url (12)

  • hxxp://51[.]15[.]112[.]248/armv4l;
  • hxxp://51[.]15[.]112[.]248/armv5l;
  • hxxp://51[.]15[.]112[.]248/armv6l;
  • hxxp://51[.]15[.]112[.]248/i586;
  • hxxp://51[.]15[.]112[.]248/i686;
  • hxxp://51[.]15[.]112[.]248/m68k;
  • hxxp://51[.]15[.]112[.]248/mips;
  • hxxp://51[.]15[.]112[.]248/mipsel;
  • hxxp://51[.]15[.]112[.]248/powerpc;
  • hxxp://51[.]15[.]112[.]248/sh4;
  • hxxp://51[.]15[.]112[.]248/sparc;
  • hxxp://51[.]15[.]112[.]248/x86;