Back to Malware Drops
4eaf68fa5363a97f243967b0d7e7f9e02875add6786fbb7c034b437b2e3022f4
MD53cc68a92e3081f6393b60b999fa76a89
SSDEEP—
File Typetext/x-script
Size2.6 KB
Sources78
Downloads0
First SeenJul 28, 2022
Last SeenJul 29, 2022
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Originating Attacks
Honeypot sessions that dropped this sample. Drop URLs are defanged; commands are shown verbatim and are not links.
- Dropped in this session (no command captured).Jul 28, 2022, 12:52:22 PMView attack session
- Dropped in this session (no command captured).Jul 28, 2022, 12:52:22 PMView attack session
- Dropped in this session (no command captured).Jul 28, 2022, 12:52:22 PMView attack session
- Dropped in this session (no command captured).Jul 28, 2022, 12:52:22 PMView attack session
- Dropped in this session (no command captured).Jul 28, 2022, 12:52:22 PMView attack session
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
ipv4 (1)
- 37[.]187[.]87[.]141
url (26)
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]arc;
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]arc;cat
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]arm;
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]arm5;
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]arm5;cat
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]arm6;
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]arm6;cat
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]arm7;
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]arm7;cat
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]arm;cat
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]m68k;
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]m68k;cat
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]mips;
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]mips;cat
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]mpsl;
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]mpsl;cat
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]ppc;
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]ppc;cat
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]sh4;
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]sh4;cat
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]spc;
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]spc;cat
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]x86;
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]x86_64;
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]x86_64;cat
- hxxp://37[.]187[.]87[.]141/MeowBins/meow[.]x86;cat