Back to Malware Drops
5f227b32570517fb68530aaa6d4ec1475733d776a9e1356cee3b67f5553f5d5b
MD50d52e1eda9721e57943978db544c4464
SSDEEP—
File Typetext/x-script
Size2.9 KB
Sources405
Downloads0
First SeenMar 21, 2022
Last SeenMar 23, 2022
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Originating Attacks
Honeypot sessions that dropped this sample. Drop URLs are defanged; commands are shown verbatim and are not links.
- Dropped in this session (no command captured).Mar 21, 2022, 5:04:06 AMView attack session
- Dropped in this session (no command captured).Mar 21, 2022, 5:04:06 AMView attack session
- Dropped in this session (no command captured).Mar 21, 2022, 5:04:06 AMView attack session
- Dropped in this session (no command captured).Mar 21, 2022, 5:04:06 AMView attack session
- Dropped in this session (no command captured).Mar 21, 2022, 5:04:06 AMView attack session
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
ipv4 (1)
- 45[.]90[.]161[.]105
url (25)
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]arm;
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]arm6;
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]arm6;cat
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]arm7;
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]arm7;cat
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]arm;cat
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]m68k;
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]m68k;cat
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]mips;
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]mips;cat
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]mpsl;
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]mpsl;cat
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]ppc;
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]ppc;cat
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]root;
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]root;cat
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]rtk;
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]rtk;cat
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]sh4;
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]sh4;cat
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]x86;
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]x86;cat
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]zte;
- hxxp://45[.]90[.]161[.]105/SBIDIOT/onions1337[.]zte;cat
- hxxp://45[.]90[.]161[.]105/systemd;