Back to Malware Drops

c7c0d2ef4dd4ffd57e3c45068566b5658160d398d03e609d5d196a60559f532b

MD5192d3a58a5d3d909ac09ce356e869a23
SSDEEP
File Typetext/x-script
Size2.1 KB
Sources9
Downloads0
First SeenNov 17, 2024
Last SeenNov 17, 2024
Download sample (.zip, password: infected)

Live malware — handle only in an isolated analysis environment.

Indicators of Compromise

Values are defanged (e.g. hxxp://, [.]) — not live links.

domain (4)

  • ssh[.]mips
  • ssh[.]mipsel
  • ssh[.]ppc
  • ssh[.]spc

ipv4 (1)

  • 45[.]91[.]193[.]133

url (24)

  • hxxp://45[.]91[.]193[.]133/bins/arm4;
  • hxxp://45[.]91[.]193[.]133/bins/arm4;cat
  • hxxp://45[.]91[.]193[.]133/bins/arm6;
  • hxxp://45[.]91[.]193[.]133/bins/arm6;cat
  • hxxp://45[.]91[.]193[.]133/bins/arm7;
  • hxxp://45[.]91[.]193[.]133/bins/arm7;cat
  • hxxp://45[.]91[.]193[.]133/bins/i486;
  • hxxp://45[.]91[.]193[.]133/bins/i486;cat
  • hxxp://45[.]91[.]193[.]133/bins/m68k;
  • hxxp://45[.]91[.]193[.]133/bins/m68k;cat
  • hxxp://45[.]91[.]193[.]133/bins/mips;
  • hxxp://45[.]91[.]193[.]133/bins/mips;cat
  • hxxp://45[.]91[.]193[.]133/bins/mpsl;
  • hxxp://45[.]91[.]193[.]133/bins/mpsl;cat
  • hxxp://45[.]91[.]193[.]133/bins/ppc;
  • hxxp://45[.]91[.]193[.]133/bins/ppc;cat
  • hxxp://45[.]91[.]193[.]133/bins/sh4;
  • hxxp://45[.]91[.]193[.]133/bins/sh4;cat
  • hxxp://45[.]91[.]193[.]133/bins/spc;
  • hxxp://45[.]91[.]193[.]133/bins/spc;cat
  • hxxp://45[.]91[.]193[.]133/bins/x86;
  • hxxp://45[.]91[.]193[.]133/bins/x86_64;
  • hxxp://45[.]91[.]193[.]133/bins/x86_64;cat
  • hxxp://45[.]91[.]193[.]133/bins/x86;cat