Back to Malware Drops
6707336c2ca6343d5c9f9e73200c9777001f006a5945a31f3d975356d561f379
MD5ca5d2d0da66e6e387f103a1073dc09c6
SSDEEP—
File Typetext/x-script
Size2.1 KB
Sources2
Downloads0
First SeenSep 5, 2023
Last SeenSep 5, 2023
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (4)
- cundi[.]mips
- cundi[.]mpsl
- cundi[.]ppc
- ssh[.]exploit
ipv4 (1)
- 103[.]212[.]81[.]116
url (22)
- hxxp://103[.]212[.]81[.]116/cundi/cundi[.]arm4;
- hxxp://103[.]212[.]81[.]116/cundi/cundi[.]arm4;cat
- hxxp://103[.]212[.]81[.]116/cundi/cundi[.]arm5;
- hxxp://103[.]212[.]81[.]116/cundi/cundi[.]arm5;cat
- hxxp://103[.]212[.]81[.]116/cundi/cundi[.]arm6;
- hxxp://103[.]212[.]81[.]116/cundi/cundi[.]arm6;cat
- hxxp://103[.]212[.]81[.]116/cundi/cundi[.]arm7;
- hxxp://103[.]212[.]81[.]116/cundi/cundi[.]arm7;cat
- hxxp://103[.]212[.]81[.]116/cundi/cundi[.]m68k;
- hxxp://103[.]212[.]81[.]116/cundi/cundi[.]m68k;cat
- hxxp://103[.]212[.]81[.]116/cundi/cundi[.]mips;
- hxxp://103[.]212[.]81[.]116/cundi/cundi[.]mips;cat
- hxxp://103[.]212[.]81[.]116/cundi/cundi[.]mpsl;
- hxxp://103[.]212[.]81[.]116/cundi/cundi[.]mpsl;cat
- hxxp://103[.]212[.]81[.]116/cundi/cundi[.]ppc;
- hxxp://103[.]212[.]81[.]116/cundi/cundi[.]ppc;cat
- hxxp://103[.]212[.]81[.]116/cundi/cundi[.]sh4;
- hxxp://103[.]212[.]81[.]116/cundi/cundi[.]sh4;cat
- hxxp://103[.]212[.]81[.]116/cundi/cundi[.]x86;
- hxxp://103[.]212[.]81[.]116/cundi/cundi[.]x86;cat
- hxxp://103[.]212[.]81[.]116/cundi/sshd;
- hxxp://103[.]212[.]81[.]116/cundi/sshd;chmod