Sign In|Register
Back to Malware Drops

d1f18709fdbbe60dcff427ba3824d0b84f3b7e21714cf245a333f3f7cc759f6d

MD55e37cdeb6fac0c110ca32350b1860997
SSDEEP—
File Typetext/x-script
Size2.8 KB
Sources1
Downloads0
First SeenOct 18, 2022
Last SeenOct 18, 2022
Download sample (.zip, password: infected)

Live malware — handle only in an isolated analysis environment.

Originating Attacks

Honeypot sessions that dropped this sample. Drop URLs are defanged; commands are shown verbatim and are not links.

Indicators of Compromise

Values are defanged (e.g. hxxp://, [.]) — not live links.

ipv4 (1)

  • 98[.]159[.]98[.]87

url (30)

  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]arc;
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]arc;cat
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]arm;
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]arm5;
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]arm5;cat
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]arm6;
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]arm6;cat
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]arm7;
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]arm7;cat
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]arm;cat
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]i468;
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]i468;cat
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]i686;
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]i686;cat
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]m68k;
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]m68k;cat
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]mips;
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]mips;cat
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]mpsl;
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]mpsl;cat
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]ppc;
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]ppc;cat
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]sh4;
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]sh4;cat
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]spc;
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]spc;cat
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]x86;
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]x86_64;
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]x86_64;cat
  • hxxp://98[.]159[.]98[.]87/hiddenbin/boatnet[.]x86;cat