Back to Malware Drops
98ce9f05d20d7511e19c010b550230e094f5ecf2be00cc2630c45c3a4c19e135
MD599676bbb4d53d0ace58166113e3bb990
SSDEEP—
File Typetext/x-script
Size2.0 KB
Sources1
Downloads0
First SeenJan 7, 2025
Last SeenJan 7, 2025
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (8)
- a-r[.]m-4[.]Sakura
- a-r[.]m-5[.]Sakura
- a-r[.]m-6[.]Sakura
- a-r[.]m-7[.]Sakura
- i-5[.]8-6[.]Sakura
- m-6[.]8-k[.]Sakura
- m-i[.]p-s[.]Sakura
- m-p[.]s-l[.]Sakura
ipv4 (1)
- 38[.]134[.]189[.]10
url (12)
- hxxp://38[.]134[.]189[.]10/a-r[.]m-4[.]Sakura;
- hxxp://38[.]134[.]189[.]10/a-r[.]m-5[.]Sakura;
- hxxp://38[.]134[.]189[.]10/a-r[.]m-6[.]Sakura;
- hxxp://38[.]134[.]189[.]10/a-r[.]m-7[.]Sakura;
- hxxp://38[.]134[.]189[.]10/i-5[.]8-6[.]Sakura;
- hxxp://38[.]134[.]189[.]10/m-6[.]8-k[.]Sakura;
- hxxp://38[.]134[.]189[.]10/m-i[.]p-s[.]Sakura;
- hxxp://38[.]134[.]189[.]10/m-p[.]s-l[.]Sakura;
- hxxp://38[.]134[.]189[.]10/p-p[.]c-[.]Sakura;
- hxxp://38[.]134[.]189[.]10/s-h[.]4-[.]Sakura;
- hxxp://38[.]134[.]189[.]10/x-3[.]2-[.]Sakura;
- hxxp://38[.]134[.]189[.]10/x-8[.]6-[.]Sakura;