Back to Malware Drops

aa2184f3af0af080ef946b5e0b4aa85c1ce412fa4979e026d88832678427aed0

MD578dfb4e2049a6e459804ca3c961fbae2
SSDEEP
File Typetext/x-script
Size1.5 KB
Sources60
Downloads0
First SeenAug 3, 2023
Last SeenAug 3, 2023
Download sample (.zip, password: infected)

Live malware — handle only in an isolated analysis environment.

Indicators of Compromise

Values are defanged (e.g. hxxp://, [.]) — not live links.

ipv4 (1)

  • 94[.]156[.]161[.]21

url (12)

  • hxxp://94[.]156[.]161[.]21/armv4l;
  • hxxp://94[.]156[.]161[.]21/armv5l;
  • hxxp://94[.]156[.]161[.]21/armv6l;
  • hxxp://94[.]156[.]161[.]21/i586;
  • hxxp://94[.]156[.]161[.]21/i686;
  • hxxp://94[.]156[.]161[.]21/m68k;
  • hxxp://94[.]156[.]161[.]21/mips;
  • hxxp://94[.]156[.]161[.]21/mipsel;
  • hxxp://94[.]156[.]161[.]21/powerpc;
  • hxxp://94[.]156[.]161[.]21/sh4;
  • hxxp://94[.]156[.]161[.]21/sparc;
  • hxxp://94[.]156[.]161[.]21/x86;