Back to Malware Drops
98cee2dc93669b4b06cd564a9d2fe50d6f15b244fdf906d02d8cdb77ea02bb5b
MD5368ca19d0c227b7d19e81dac5b32d2f4
SSDEEP—
File Typetext/x-script
Size2.7 KB
Sources12
Downloads0
First SeenAug 19, 2020
Last SeenAug 28, 2020
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Originating Attacks
Honeypot sessions that dropped this sample. Drop URLs are defanged; commands are shown verbatim and are not links.
- Dropped in this session (no command captured).Aug 19, 2020, 10:29:15 AMView attack session
- Dropped in this session (no command captured).Aug 19, 2020, 10:29:15 AMView attack session
- Dropped in this session (no command captured).Aug 19, 2020, 10:29:15 AMView attack session
- Dropped in this session (no command captured).Aug 19, 2020, 10:29:15 AMView attack session
- Dropped in this session (no command captured).Aug 19, 2020, 10:29:15 AMView attack session
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
ipv4 (1)
- 193[.]228[.]91[.]110
url (26)
- hxxp://193[.]228[.]91[.]110/bot[.]arm;
- hxxp://193[.]228[.]91[.]110/bot[.]arm5;
- hxxp://193[.]228[.]91[.]110/bot[.]arm5;cat
- hxxp://193[.]228[.]91[.]110/bot[.]arm6;
- hxxp://193[.]228[.]91[.]110/bot[.]arm6;cat
- hxxp://193[.]228[.]91[.]110/bot[.]arm7;
- hxxp://193[.]228[.]91[.]110/bot[.]arm7;cat
- hxxp://193[.]228[.]91[.]110/bot[.]arm;cat
- hxxp://193[.]228[.]91[.]110/bot[.]i586;
- hxxp://193[.]228[.]91[.]110/bot[.]i586;cat
- hxxp://193[.]228[.]91[.]110/bot[.]i686;
- hxxp://193[.]228[.]91[.]110/bot[.]i686;cat
- hxxp://193[.]228[.]91[.]110/bot[.]m68k;
- hxxp://193[.]228[.]91[.]110/bot[.]m68k;cat
- hxxp://193[.]228[.]91[.]110/bot[.]mips;
- hxxp://193[.]228[.]91[.]110/bot[.]mips;cat
- hxxp://193[.]228[.]91[.]110/bot[.]mipsel;
- hxxp://193[.]228[.]91[.]110/bot[.]mipsel;cat
- hxxp://193[.]228[.]91[.]110/bot[.]ppc;
- hxxp://193[.]228[.]91[.]110/bot[.]ppc;cat
- hxxp://193[.]228[.]91[.]110/bot[.]sh4;
- hxxp://193[.]228[.]91[.]110/bot[.]sh4;cat
- hxxp://193[.]228[.]91[.]110/bot[.]spc;
- hxxp://193[.]228[.]91[.]110/bot[.]spc;cat
- hxxp://193[.]228[.]91[.]110/bot[.]x86;
- hxxp://193[.]228[.]91[.]110/bot[.]x86;cat