Back to Malware Drops
61bfcb9f295fe299690de72f8625f014df21e1d50c1d850db9c1a8d39988f2ab
MD5cc82609378417cd6bf08f48d924f4cbb
SSDEEP—
File Typeunknown
Size1.6 KB
Sources38
Downloads0
First SeenDec 12, 2024
Last SeenDec 12, 2024
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (18)
- bob[.]arc[.]curl
- bob[.]arc[.]wget
- bob[.]arm5[.]curl
- bob[.]arm5[.]wget
- bob[.]arm7[.]curl
- bob[.]arm7[.]wget
- bob[.]arm[.]curl
- bob[.]arm[.]wget
- bob[.]mips[.]curl
- bob[.]mips[.]wget
- bob[.]mpsl[.]curl
- bob[.]mpsl[.]wget
- bob[.]ppc[.]curl
- bob[.]ppc[.]wget
- bob[.]sh4[.]curl
- bob[.]sh4[.]wget
- bob[.]x86[.]curl
- bob[.]x86[.]wget
ipv4 (1)
- 185[.]157[.]247[.]35
url (9)
- hxxp://185[.]157[.]247[.]35/arc
- hxxp://185[.]157[.]247[.]35/arm
- hxxp://185[.]157[.]247[.]35/arm5
- hxxp://185[.]157[.]247[.]35/arm7
- hxxp://185[.]157[.]247[.]35/mips
- hxxp://185[.]157[.]247[.]35/mpsl
- hxxp://185[.]157[.]247[.]35/ppc
- hxxp://185[.]157[.]247[.]35/sh4
- hxxp://185[.]157[.]247[.]35/x86