Back to Malware Drops
80ad3c4b6686c680178b1f2cf87321c7a8cd61d28d16d88b7baf1be505b57f7a
MD5e0037440de31dbbed4eb9fa4967ce2f7
SSDEEP—
File Typetext/x-script
Size1.6 KB
Sources43
Downloads0
First SeenApr 21, 2023
Last SeenMay 14, 2023
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
ipv4 (1)
- 85[.]217[.]144[.]207
url (20)
- hxxp://85[.]217[.]144[.]207/bins/arm;
- hxxp://85[.]217[.]144[.]207/bins/arm5;
- hxxp://85[.]217[.]144[.]207/bins/arm5;cat
- hxxp://85[.]217[.]144[.]207/bins/arm6;
- hxxp://85[.]217[.]144[.]207/bins/arm6;cat
- hxxp://85[.]217[.]144[.]207/bins/arm7;
- hxxp://85[.]217[.]144[.]207/bins/arm7;cat
- hxxp://85[.]217[.]144[.]207/bins/arm;cat
- hxxp://85[.]217[.]144[.]207/bins/m68k;
- hxxp://85[.]217[.]144[.]207/bins/m68k;cat
- hxxp://85[.]217[.]144[.]207/bins/mips;
- hxxp://85[.]217[.]144[.]207/bins/mips;cat
- hxxp://85[.]217[.]144[.]207/bins/mpsl;
- hxxp://85[.]217[.]144[.]207/bins/mpsl;cat
- hxxp://85[.]217[.]144[.]207/bins/ppc;
- hxxp://85[.]217[.]144[.]207/bins/ppc;cat
- hxxp://85[.]217[.]144[.]207/bins/sh4;
- hxxp://85[.]217[.]144[.]207/bins/sh4;cat
- hxxp://85[.]217[.]144[.]207/bins/x86;
- hxxp://85[.]217[.]144[.]207/bins/x86;cat