Back to Malware Drops

65df44523c379b9cf7f334056642e51305af7a8c8b4af7b084b4432632e85098

MD593b4d9b68242bedb55d7aacb1b0fccf8
SSDEEP1536:W29RIMUpfjqDkK5pqpIjA8FPFLSQ0s6OkGp1bt6ZeVCbhG:MfjfK5pqpIjA8FPFu1OkGphtuIC
File Typeapplication/x-executable
Size77.8 KB
Sources77
Downloads0
First SeenJun 3, 2023
Last SeenJun 5, 2023
Download sample (.zip, password: infected)

Live malware — handle only in an isolated analysis environment.

Indicators of Compromise

Values are defanged (e.g. hxxp://, [.]) — not live links.

domain (1)

  • Jaws[.]rep

ipv4 (3)

  • 127[.]0[.]0[.]1
  • 255[.]255[.]255[.]255
  • 50[.]115[.]165[.]101

url (1)

  • hxxp://50[.]115[.]165[.]101/bins/Astra[.]arm7;chmod+777+Astra[.]arm7;[.]/Astra[.]arm7+Jaws[.]rep