Back to Malware Drops

ce070a78a50e01678fdf3d2554398b5bbd96b7969e101dc57c1c38f0863ffb4c

MD5defd312cf3751acf2e7c331de255121a
SSDEEP3072:lauaV97dFno1hsD4lLsCH4aNSJReEK5BQ6SnJ43aCQiqoa/e:lafIi4Jp4RnCk6AVG
File Typeapplication/x-executable
Size172.0 KB
Sources1
Downloads0
First SeenJan 17, 2023
Last SeenJan 17, 2023
Download sample (.zip, password: infected)

Live malware — handle only in an isolated analysis environment.

Indicators of Compromise

Values are defanged (e.g. hxxp://, [.]) — not live links.

domain (11)

  • dosset[.]dtdb
  • gnu[.]hash
  • gnu[.]version
  • got[.]plt
  • ld-linux-x86-64[.]so
  • libc[.]so
  • libpthread[.]so
  • note[.]ABI
  • rc[.]local
  • rela[.]dyn
  • rela[.]plt

ipv4 (1)

  • 114[.]55[.]106[.]38