Back to Malware Drops
62f1c6afca91811f41c42ddb85464a4ddf0787793a079a68587c1a0f0b53c5d3
MD55c75256ff15177fadac5c895c962b733
SSDEEP192:5me2duaPLXKf3wL/O8u1n+EFAKvAvyEpH9UUFY7v2z:8e2d3jXKvwTO8uNpqKUhmi
File Typeunknown
Size7.1 KB
Sources14
Downloads0
First SeenJul 26, 2023
Last SeenJul 26, 2023
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (40)
- 404-arrow[.]png
- 404-header-line[.]gif
- 404-logo[.]png
- 404[.]png
- book[.]ucoz[.]com
- button[.]png
- counter[.]yadro[.]ru
- d[.]addEventListener
- Date[.]now
- d[.]createElement
- d[.]getElementsByTagName
- d[.]location[.]protocol
- document[.]body[.]appendChild
- document[.]createElement
- document[.]getElementsByTagName
- document[.]location[.]protocol
- document[.]referrer
- document[.]URL
- faq[.]ucoz[.]com
- forum[.]ucoz[.]com
- ga[.]async
- ga[.]js
- ga[.]src
- ga[.]type
- google-analytics[.]com
- google[.]com
- history[.]back
- Math[.]random
- mc[.]yandex[.]ru
- n[.]parentNode[.]insertBefore
- page404[.]js
- pushesScript[.]src
- s[.]async
- screen[.]colorDepth
- screen[.]height
- screen[.]pixelDepth
- screen[.]width
- s[.]parentNode[.]insertBefore
- s[.]src
- s[.]type