Back to Malware Drops
c5474a03383d63ce590ee4517d755040e2bb8814550ddb6c2aa7b3fe49ce934b
MD5e0814dd1ccea4065ab1d828aa3e3a4c0
SSDEEP—
File Typetext/x-script
Size2.2 KB
Sources2
Downloads0
First SeenFeb 12, 2023
Last SeenFeb 12, 2023
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (4)
- assailant[.]mips
- assailant[.]mpsl
- assailant[.]ppc
- assailant[.]sparc
ipv4 (1)
- 104[.]244[.]75[.]53
url (14)
- hxxp://104[.]244[.]75[.]53/assailant[.]arm4;
- hxxp://104[.]244[.]75[.]53/assailant[.]arm5;
- hxxp://104[.]244[.]75[.]53/assailant[.]arm6;
- hxxp://104[.]244[.]75[.]53/assailant[.]arm7;
- hxxp://104[.]244[.]75[.]53/assailant[.]i586;
- hxxp://104[.]244[.]75[.]53/assailant[.]i686;
- hxxp://104[.]244[.]75[.]53/assailant[.]m68k;
- hxxp://104[.]244[.]75[.]53/assailant[.]mips;
- hxxp://104[.]244[.]75[.]53/assailant[.]mpsl;
- hxxp://104[.]244[.]75[.]53/assailant[.]ppc;
- hxxp://104[.]244[.]75[.]53/assailant[.]ppc440fp;
- hxxp://104[.]244[.]75[.]53/assailant[.]sh4;
- hxxp://104[.]244[.]75[.]53/assailant[.]sparc;
- hxxp://104[.]244[.]75[.]53/assailant[.]x86;