bd145676c6767709d39d47eb2bb2fe5051b790db64bf150b233d3f49438346b2

Live malware — handle only in an isolated analysis environment.

btc (1)

• 3612f843a42db38f48f59d2a3597e19c

domain (4)

• index[.]php
• schemas[.]xmlsoap[.]org
• ViewLog[.]asp
• zyxel[.]sh

ipv4 (2)

• 192[.]168[.]0[.]14
• 64[.]235[.]37[.]140

url (4)

• hxxp://64[.]235[.]37[.]140/bins/x86
• hxxp://64[.]235[.]37[.]140/zyxel[.]sh;
• hxxp://schemas[.]xmlsoap[.]org/soap/encoding/
• hxxp://schemas[.]xmlsoap[.]org/soap/envelope/