Back to Malware Drops
89b2e1eac68709ec7626191285459646dbb536312b89fb39c761466d8613414a
MD5a0d4728b5b0bac50f8598ff0ea75f798
SSDEEP—
File Typetext/x-script
Size3.7 KB
Sources3
Downloads0
First SeenDec 1, 2024
Last SeenDec 1, 2024
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (6)
- ub8ehJSePAfc9FYqZIT6[.]arc
- ub8ehJSePAfc9FYqZIT6[.]arm
- ub8ehJSePAfc9FYqZIT6[.]mips
- ub8ehJSePAfc9FYqZIT6[.]mpsl
- ub8ehJSePAfc9FYqZIT6[.]ppc
- ub8ehJSePAfc9FYqZIT6[.]sparc
ipv4 (1)
- 64[.]235[.]45[.]196
url (30)
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]arc;
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]arc;cat
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]arm;
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]arm5;
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]arm5;cat
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]arm6;
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]arm6;cat
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]arm7;
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]arm7;cat
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]arm;cat
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]i686;
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]i686;cat
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]m68k;
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]m68k;cat
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]mips;
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]mips64;
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]mips64;cat
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]mips;cat
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]mpsl;
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]mpsl;cat
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]ppc;
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]ppc;cat
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]sh4;
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]sh4;cat
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]sparc;
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]sparc;cat
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]x86;
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]x86_64;
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]x86_64;cat
- hxxp://64[.]235[.]45[.]196/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]x86;cat