Back to Malware Drops
4a6f00a9f770c33487e08b9ab94f3cdd34669db127d3de75e6fa06140bd5b004
MD5d4fefeaddc2e1dd6a69ebd7a7cba51d8
SSDEEP96:1j9jwIjYjyDK/DZD8jH+k1JvJADh/pRs8siszbGD:1j9jhjYjWK/lyH+kJRADh/pm8sisfGD
File Typeunknown
Size4.2 KB
Sources1
Downloads0
First SeenDec 18, 2021
Last SeenDec 18, 2021
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Originating Attacks
Honeypot sessions that dropped this sample. Drop URLs are defanged; commands are shown verbatim and are not links.
- Dropped in this session (no command captured).Dec 18, 2021, 7:59:52 PMView attack session
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (1)
- www[.]cloudflare[.]com
ipv4 (1)
- 64[.]227[.]8[.]165
url (1)
- hxxps://www[.]cloudflare[.]com/5xx-error-landing