Back to Malware Drops
b3c53f4063eb5c7a3912d56e5b7f709d99c9e4a0bfe86b185504ee9cbba75475
MD5d56469bc68d1435bb77952261336f155
SSDEEP—
File Typeunknown
Size3.6 KB
Sources5
Downloads0
First SeenJul 23, 2023
Last SeenJul 24, 2023
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
ipv4 (1)
- 109[.]206[.]242[.]217
url (11)
- hxxp://109[.]206[.]242[.]217/linux/Rosetide_AArch64;
- hxxp://109[.]206[.]242[.]217/linux/Rosetide_AMDx86_64;
- hxxp://109[.]206[.]242[.]217/linux/Rosetide_ARMv5;
- hxxp://109[.]206[.]242[.]217/linux/Rosetide_ARMv6;
- hxxp://109[.]206[.]242[.]217/linux/Rosetide_ARMv7;
- hxxp://109[.]206[.]242[.]217/linux/Rosetide_Intelx86;
- hxxp://109[.]206[.]242[.]217/linux/Rosetide_mips;
- hxxp://109[.]206[.]242[.]217/linux/Rosetide_mipsle;
- hxxp://109[.]206[.]242[.]217/linux/Rosetide_ppc64;
- hxxp://109[.]206[.]242[.]217/linux/Rosetide_ppc64le;
- hxxp://109[.]206[.]242[.]217/linux/Rosetide_s390x;