Back to Malware Drops
42fc8afb9cf3af9b831fa9d64148ace917e63b97275d41ccf612e6582421d4c8
MD58348231df1129cd4a9c3b609c3009c9e
SSDEEP—
File Typetext/x-script
Size3.2 KB
Sources21
Downloads0
First SeenNov 26, 2022
Last SeenNov 26, 2022
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (7)
- amkbins[.]duckdns[.]org
- ascaris[.]arc
- ascaris[.]arm
- ascaris[.]mips
- ascaris[.]mpsl
- ascaris[.]ppc
- ascaris[.]spc
url (15)
- hxxp://amkbins[.]duckdns[.]org/bins/ascaris[.]arc;
- hxxp://amkbins[.]duckdns[.]org/bins/ascaris[.]arm;
- hxxp://amkbins[.]duckdns[.]org/bins/ascaris[.]arm5;
- hxxp://amkbins[.]duckdns[.]org/bins/ascaris[.]arm6;
- hxxp://amkbins[.]duckdns[.]org/bins/ascaris[.]arm7;
- hxxp://amkbins[.]duckdns[.]org/bins/ascaris[.]i486;
- hxxp://amkbins[.]duckdns[.]org/bins/ascaris[.]i686;
- hxxp://amkbins[.]duckdns[.]org/bins/ascaris[.]m68k;
- hxxp://amkbins[.]duckdns[.]org/bins/ascaris[.]mips;
- hxxp://amkbins[.]duckdns[.]org/bins/ascaris[.]mpsl;
- hxxp://amkbins[.]duckdns[.]org/bins/ascaris[.]ppc;
- hxxp://amkbins[.]duckdns[.]org/bins/ascaris[.]sh4;
- hxxp://amkbins[.]duckdns[.]org/bins/ascaris[.]spc;
- hxxp://amkbins[.]duckdns[.]org/bins/ascaris[.]x86;
- hxxp://amkbins[.]duckdns[.]org/bins/ascaris[.]x86_64;