Back to Malware Drops

871d295d78fbfe00de2b739effcd32a480b18d48fa93cffff34bf7f4aa389a4e

MD5981a4676015a02b18d3b55a115f0e7d2
SSDEEP
File Typeunknown
Size799 B
Sources3
Downloads0
First SeenNov 30, 2024
Last SeenNov 30, 2024
Download sample (.zip, password: infected)

Live malware — handle only in an isolated analysis environment.

Indicators of Compromise

Values are defanged (e.g. hxxp://, [.]) — not live links.

ipv4 (1)

  • 91[.]227[.]62[.]22

url (13)

  • hxxp://91[.]227[.]62[.]22/release/aarch64
  • hxxp://91[.]227[.]62[.]22/release/arc
  • hxxp://91[.]227[.]62[.]22/release/arm
  • hxxp://91[.]227[.]62[.]22/release/arm5
  • hxxp://91[.]227[.]62[.]22/release/arm7
  • hxxp://91[.]227[.]62[.]22/release/csky
  • hxxp://91[.]227[.]62[.]22/release/i586
  • hxxp://91[.]227[.]62[.]22/release/i686
  • hxxp://91[.]227[.]62[.]22/release/mips
  • hxxp://91[.]227[.]62[.]22/release/mpsl
  • hxxp://91[.]227[.]62[.]22/release/mpsl-wrt
  • hxxp://91[.]227[.]62[.]22/release/openrisc
  • hxxp://91[.]227[.]62[.]22/release/ppc