Back to Malware Drops

46eff381cf326632af2f6bacb8cc85067af01774df237ee5cbd0bf58fb8dc910

MD5c9107b3b372b757743f1be4a121bd5ab
SSDEEP96:1j9jwIjYjyDK/DZD8jH+k1JvJADh/pRspsiszbGD:1j9jhjYjWK/lyH+kJRADh/pmpsisfGD
File Typeunknown
Size4.2 KB
Sources1
Downloads0
First SeenDec 18, 2021
Last SeenDec 18, 2021
Download sample (.zip, password: infected)

Live malware — handle only in an isolated analysis environment.

Originating Attacks

Honeypot sessions that dropped this sample. Drop URLs are defanged; commands are shown verbatim and are not links.

Indicators of Compromise

Values are defanged (e.g. hxxp://, [.]) — not live links.

domain (1)

  • www[.]cloudflare[.]com

ipv4 (1)

  • 64[.]227[.]8[.]165

url (1)

  • hxxps://www[.]cloudflare[.]com/5xx-error-landing