Back to Malware Drops

7d92b8335a5f9c754b85993e062ef4e889e7511f8de5f9f4b46dba5db543fa52

MD51ec333a64f2ee3b0bd090f0f0dc46ff8
SSDEEP96:1j9jwIjYjyDK/DZD8jH+k1JvJADh/pRsxsiszbGD:1j9jhjYjWK/lyH+kJRADh/pmxsisfGD
File Typeunknown
Size4.2 KB
Sources1
Downloads0
First SeenDec 18, 2021
Last SeenDec 18, 2021
Download sample (.zip, password: infected)

Live malware — handle only in an isolated analysis environment.

Originating Attacks

Honeypot sessions that dropped this sample. Drop URLs are defanged; commands are shown verbatim and are not links.

Indicators of Compromise

Values are defanged (e.g. hxxp://, [.]) — not live links.

domain (1)

  • www[.]cloudflare[.]com

ipv4 (1)

  • 64[.]227[.]8[.]165

url (1)

  • hxxps://www[.]cloudflare[.]com/5xx-error-landing