Back to Malware Drops
5bf7414b86ce85d1f1915b6cfbf24e7fe0db33549af43e7b1b323dd7843a6553
MD5f7c302c228f03fa7d39ea6dd8659e5de
SSDEEP—
File Typetext/x-script
Size1.2 KB
Sources2
Downloads0
First SeenSep 6, 2023
Last SeenSep 6, 2023
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
ipv4 (1)
- 194[.]153[.]216[.]164
url (14)
- hxxp://194[.]153[.]216[.]164/bins/arm4;
- hxxp://194[.]153[.]216[.]164/bins/arm4;cat
- hxxp://194[.]153[.]216[.]164/bins/arm5;
- hxxp://194[.]153[.]216[.]164/bins/arm5;cat
- hxxp://194[.]153[.]216[.]164/bins/arm6;
- hxxp://194[.]153[.]216[.]164/bins/arm6;cat
- hxxp://194[.]153[.]216[.]164/bins/arm7;
- hxxp://194[.]153[.]216[.]164/bins/arm7;cat
- hxxp://194[.]153[.]216[.]164/bins/mips;
- hxxp://194[.]153[.]216[.]164/bins/mips;cat
- hxxp://194[.]153[.]216[.]164/bins/mpsl;
- hxxp://194[.]153[.]216[.]164/bins/mpsl;cat
- hxxp://194[.]153[.]216[.]164/bins/x86_x64;
- hxxp://194[.]153[.]216[.]164/bins/x86_x64;cat