Back to Malware Drops

bcd5fbe6c4e786ab9cbd5ef139002f958d61a3c6fc40f86779ff9d1bb1a6fdac

MD501f8e18c5f043268ece3148a0f36dcdd
SSDEEP
File Typeunknown
Size2.3 KB
Sources4
Downloads0
First SeenDec 23, 2023
Last SeenDec 23, 2023
Download sample (.zip, password: infected)

Live malware — handle only in an isolated analysis environment.

Indicators of Compromise

Values are defanged (e.g. hxxp://, [.]) — not live links.

domain (7)

  • auth[.]log
  • hf[.]areme[.]tk
  • mail[.]info
  • openwebmail[.]log
  • overclock[.]service
  • user[.]log
  • vnc-password[.]txt

url (2)

  • hxxp://hf[.]areme[.]tk:12300/hfs/nvidia-conf-delay
  • hxxp://hf[.]areme[.]tk:12300/hfs/overclock[.]service