Back to Malware Drops
47d5920574bd41c7301f069a19d0404801ec47705a43a5822a317122d6128142
MD5e9b348ab2fa549ea90eae0a8dcc55f75
SSDEEP—
File Typetext/x-script
Size822 B
Sources244
Downloads0
First SeenMar 15, 2022
Last SeenMar 16, 2022
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Originating Attacks
Honeypot sessions that dropped this sample. Drop URLs are defanged; commands are shown verbatim and are not links.
- Dropped in this session (no command captured).Mar 15, 2022, 4:19:21 AMView attack session
- Dropped in this session (no command captured).Mar 15, 2022, 4:19:21 AMView attack session
- Dropped in this session (no command captured).Mar 15, 2022, 4:19:21 AMView attack session
- Dropped in this session (no command captured).Mar 15, 2022, 4:19:21 AMView attack session
- Dropped in this session (no command captured).Mar 15, 2022, 4:19:21 AMView attack session
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
ipv4 (1)
- 45[.]90[.]161[.]105
url (9)
- hxxp://45[.]90[.]161[.]105/banner[.]log;
- hxxp://45[.]90[.]161[.]105/boner;
- hxxp://45[.]90[.]161[.]105/brute;
- hxxp://45[.]90[.]161[.]105/hrdmv1;
- hxxp://45[.]90[.]161[.]105/loop;
- hxxp://45[.]90[.]161[.]105/pass_file;
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]x86;
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]x86;cat
- hxxp://45[.]90[.]161[.]105/shitscanner;