Back to Malware Drops

8bce6c2ac252bba6b6010577d057beb72ca36ca71f1481018c6e04f972ce7575

MD5eefa5519262c66720521729aa91d83d2
SSDEEP
File Typetext/x-script
Size1.2 KB
Sources71
Downloads0
First SeenJan 9, 2023
Last SeenJan 10, 2023
Download sample (.zip, password: infected)

Live malware — handle only in an isolated analysis environment.

Indicators of Compromise

Values are defanged (e.g. hxxp://, [.]) — not live links.

domain (6)

  • dero-miner[.]sh
  • m[.]sh
  • newinit[.]sh
  • ps[.]original
  • top[.]original
  • xxi[.]tar

ipv4 (1)

  • 185[.]252[.]178[.]82

url (1)

  • hxxp://185[.]252[.]178[.]82:6969/Ep1Tvo/xxi[.]tar