Back to Malware Drops
745dfda198cb9e272423ad81a7f770ab7c69943403313573ca44442aa8927922
MD55fc499daea9a37ecf02bfa3d26302062
SSDEEP—
File Typetext/x-script
Size1.7 KB
Sources1
Downloads0
First SeenJan 3, 2020
Last SeenJan 3, 2020
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Originating Attacks
Honeypot sessions that dropped this sample. Drop URLs are defanged; commands are shown verbatim and are not links.
- Dropped in this session (no command captured).Jan 3, 2020, 9:59:31 AMView attack session
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (1)
- upajmeter[.]com
url (7)
- hxxps://upajmeter[.]com/[.]foo/monero[.]tgz
- hxxps://upajmeter[.]com/[.]foo/nano[.]php
- hxxps://upajmeter[.]com/[.]foo/remote/cron[.]sh
- hxxps://upajmeter[.]com/[.]foo/sslm[.]tgz
- hxxp://upajmeter[.]com/[.]foo/nano[.]php
- hxxp://upajmeter[.]com/[.]foo/remote/info[.]php
- hxxp://upajmeter[.]com/[.]foo/remote/info[.]php`