Back to Malware Drops
50de20d4870a6dd09101a3654465f5eb5fed310d4a566bec3e6d21cfa214ba43
MD5d7a62e6888d9e4f08701139c708878b5
SSDEEP384:v0FINvSo5o/DYIoq47z2YEEFXBTBfZ4zLZP1hncu/tpbOfvuy/97M8T:YCxIoq47z2YEmXBTBshvbSZX
File Typetext/x-script
Size41.6 KB
Sources12
Downloads0
First SeenJan 16, 2023
Last SeenJan 16, 2023
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (5)
- cmd[.]exe
- flood[.]ro
- gsm[.]ftp[.]sh
- HSBC[.]users[.]undernet[.]org
- K[.]Mardam
url (1)
- hxxp://([^/: