Back to Malware Drops
3f9a4dc3e6bcc060d5f7693b58df0bf300d74ae86afb1507eef130f7b17cd9ee
MD520cdf64f969c82255f6468211c726d11
SSDEEP96:wh9hJhZhfh/hdhMNhMZhmRhrhjhn1hxhlhnY8hqhmhBh3Th3Lh3u7vohUzhmhlh8:1s6TOaWuR8EGMU34wm4
File Typetext/x-script
Size4.5 KB
Sources192
Downloads0
First SeenJan 11, 2024
Last SeenJan 12, 2024
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (2)
- bins[.]sh
- t[.]me
ipv4 (1)
- 93[.]123[.]85[.]35
url (22)
- hxxp://93[.]123[.]85[.]35/bins/0hGdo5jn8Uh4;
- hxxp://93[.]123[.]85[.]35/bins/3I8g5yO42xhH;
- hxxp://93[.]123[.]85[.]35/bins/3Uzh29sFxCKi;
- hxxp://93[.]123[.]85[.]35/bins/412LyNzMjQhY;
- hxxp://93[.]123[.]85[.]35/bins/6DqAV97MRI5l;
- hxxp://93[.]123[.]85[.]35/bins/75R29N7x4smz;
- hxxp://93[.]123[.]85[.]35/bins/7n0Oym3K50gk;
- hxxp://93[.]123[.]85[.]35/bins/7z3YX2ZRrPkf;
- hxxp://93[.]123[.]85[.]35/bins/99t5WUMNveDL;
- hxxp://93[.]123[.]85[.]35/bins/9m5X7bxH0M8M;
- hxxp://93[.]123[.]85[.]35/bins/A5i02Gn0VA28;
- hxxp://93[.]123[.]85[.]35/bins/a9B3p9KryWWr;
- hxxp://93[.]123[.]85[.]35/bins/A9m2V5O178xc;
- hxxp://93[.]123[.]85[.]35/bins/d0S83KAM9zlX;
- hxxp://93[.]123[.]85[.]35/bins/eB36T1Vz1BR7;
- hxxp://93[.]123[.]85[.]35/bins/Fl78L8jypOEM;
- hxxp://93[.]123[.]85[.]35/bins/g5J58UFe6c28;
- hxxp://93[.]123[.]85[.]35/bins/Keg853zjVUWW;
- hxxp://93[.]123[.]85[.]35/bins/nS4nt37Oor0Q;
- hxxp://93[.]123[.]85[.]35/bins/r47rVZNa4P5H;
- hxxp://93[.]123[.]85[.]35/bins/xD39YVDoU52O;
- hxxp://93[.]123[.]85[.]35/bins/z06C2GvUPwgU;