Back to Malware Drops
a4ee5a00b20c7523ca6affc2c20d7f2ae8ca2f8503a7dd5f31ca879d36f0db8c
MD55588b5da9effdcff798bac42688c9769
SSDEEP96:xh9hZhfhdhMNhMcRhrhn1hxhnY8hqhBh3Th3u7vohUzhlhfhthshphvh+0hBhZhC:CschN6WR8EGM34wrscZ0nWR8EqM34w1
File Typetext/x-script
Size7.5 KB
Sources16
Downloads0
First SeenJan 10, 2024
Last SeenJan 11, 2024
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (1)
- bins[.]sh
ipv4 (1)
- 93[.]123[.]85[.]35
url (22)
- hxxp://93[.]123[.]85[.]35/bins/0hGdo5jn8Uh4;
- hxxp://93[.]123[.]85[.]35/bins/3I8g5yO42xhH;
- hxxp://93[.]123[.]85[.]35/bins/3Uzh29sFxCKi;
- hxxp://93[.]123[.]85[.]35/bins/412LyNzMjQhY;
- hxxp://93[.]123[.]85[.]35/bins/6DqAV97MRI5l;
- hxxp://93[.]123[.]85[.]35/bins/75R29N7x4smz;
- hxxp://93[.]123[.]85[.]35/bins/7n0Oym3K50gk;
- hxxp://93[.]123[.]85[.]35/bins/7z3YX2ZRrPkf;
- hxxp://93[.]123[.]85[.]35/bins/99t5WUMNveDL;
- hxxp://93[.]123[.]85[.]35/bins/9m5X7bxH0M8M;
- hxxp://93[.]123[.]85[.]35/bins/A5i02Gn0VA28;
- hxxp://93[.]123[.]85[.]35/bins/a9B3p9KryWWr;
- hxxp://93[.]123[.]85[.]35/bins/A9m2V5O178xc;
- hxxp://93[.]123[.]85[.]35/bins/d0S83KAM9zlX;
- hxxp://93[.]123[.]85[.]35/bins/eB36T1Vz1BR7;
- hxxp://93[.]123[.]85[.]35/bins/Fl78L8jypOEM;
- hxxp://93[.]123[.]85[.]35/bins/g5J58UFe6c28;
- hxxp://93[.]123[.]85[.]35/bins/Keg853zjVUWW;
- hxxp://93[.]123[.]85[.]35/bins/nS4nt37Oor0Q;
- hxxp://93[.]123[.]85[.]35/bins/r47rVZNa4P5H;
- hxxp://93[.]123[.]85[.]35/bins/xD39YVDoU52O;
- hxxp://93[.]123[.]85[.]35/bins/z06C2GvUPwgU;