Back to Malware Drops
b43f51ff2d22190de7506715402aa89521a55d2a24f15044103dfe6fb2cb860c
MD5274a2caa2427a5cbdd52a7eb0dd5860d
SSDEEP24576:e845rGHu6gVJKG75oFpA0VWeX4Q2y1q2rJp0:745vRVJKGtSA0VWeonu9p0
File Typeapplication/x-executable
Size1.2 MB
Sources99
Downloads0
First SeenFeb 6, 2024
Last SeenFeb 17, 2024
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (40)
- AmpResource[.]cpp
- a[.]out
- Attack[.]cpp
- AutoLock[.]cpp
- bill[.]lock
- bugs[.]html
- CmdMsg[.]cpp
- ConfigDoing[.]cpp
- data[.]rel[.]ro
- dkuug[.]dk
- DNSCache[.]cpp
- DW[.]ref
- ExChange[.]cpp
- FileOp[.]cpp
- gconv-modules[.]cache
- glibc-ld[.]so
- Global[.]cpp
- got[.]plt
- Ijduy[.]cpp
- Iysd76[.]cpp
- j[.]PR
- ld[.]so
- ld[.]so[.]cache
- libamplify[.]so
- locale[.]alias
- Log[.]cpp
- Main[.]cpp
- Manager[.]cpp
- Md5[.]cpp
- Media[.]cpp
- MiniHttpHelper[.]cpp
- NetBase[.]cpp
- note[.]ABI
- notify[.]file
- nsswitch[.]conf
- ProtocolUtil[.]cpp
- ProvinceDns[.]cpp
- resolv[.]conf
- StatBase[.]cpp
- SysTool[.]cpp