Back to Malware Drops
6170a15311b0720195234a98ae5e07e267b72d7ebc49d0e32a9f9b77413f2001
MD57985a584c2fb868c3353041000d9438f
SSDEEP—
File Typetext/x-script
Size1.5 KB
Sources31
Downloads0
First SeenNov 22, 2024
Last SeenNov 24, 2024
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (1)
- sh[.]sh
ipv4 (1)
- 45[.]125[.]66[.]203
url (12)
- hxxp://45[.]125[.]66[.]203/jklarc
- hxxp://45[.]125[.]66[.]203/jklarm
- hxxp://45[.]125[.]66[.]203/jklarm5
- hxxp://45[.]125[.]66[.]203/jklarm6
- hxxp://45[.]125[.]66[.]203/jklarm7
- hxxp://45[.]125[.]66[.]203/jklm68k
- hxxp://45[.]125[.]66[.]203/jklmips
- hxxp://45[.]125[.]66[.]203/jklmpsl
- hxxp://45[.]125[.]66[.]203/jklppc
- hxxp://45[.]125[.]66[.]203/jklsh4
- hxxp://45[.]125[.]66[.]203/jklspc
- hxxp://45[.]125[.]66[.]203/jklx86