Back to Malware Drops

5bd3ad54ed42015e71de93bf4ba68e4edbb05e09023ebb9daf0b5b663c70782c

MD5892ed180baa85fc49a2be597e07c767e
SSDEEP
File Typetext/x-script
Size1.7 KB
Sources4
Downloads0
First SeenNov 29, 2024
Last SeenNov 29, 2024
Download sample (.zip, password: infected)

Live malware — handle only in an isolated analysis environment.

Indicators of Compromise

Values are defanged (e.g. hxxp://, [.]) — not live links.

ipv4 (1)

  • 45[.]200[.]149[.]77

url (20)

  • hxxp://45[.]200[.]149[.]77/dvwkja7;
  • hxxp://45[.]200[.]149[.]77/dvwkja7;cat
  • hxxp://45[.]200[.]149[.]77/jwwofba5;
  • hxxp://45[.]200[.]149[.]77/jwwofba5;cat
  • hxxp://45[.]200[.]149[.]77/kjsusa6;
  • hxxp://45[.]200[.]149[.]77/kjsusa6;cat
  • hxxp://45[.]200[.]149[.]77/qkbfi86;
  • hxxp://45[.]200[.]149[.]77/qkbfi86;cat
  • hxxp://45[.]200[.]149[.]77/qkehusl;
  • hxxp://45[.]200[.]149[.]77/qkehusl;cat
  • hxxp://45[.]200[.]149[.]77/vkjqpc;
  • hxxp://45[.]200[.]149[.]77/vkjqpc;cat
  • hxxp://45[.]200[.]149[.]77/vqsjh4;
  • hxxp://45[.]200[.]149[.]77/vqsjh4;cat
  • hxxp://45[.]200[.]149[.]77/vsbeps;
  • hxxp://45[.]200[.]149[.]77/vsbeps;cat
  • hxxp://45[.]200[.]149[.]77/wheiuwa4;
  • hxxp://45[.]200[.]149[.]77/wheiuwa4;cat
  • hxxp://45[.]200[.]149[.]77/wriww68k;
  • hxxp://45[.]200[.]149[.]77/wriww68k;cat