Back to Malware Drops

d64268e5d8797b87399648f75f99e1e36f7540badb030cb831f7a2dff20815e9

MD5ed20a29e28e177a42d54eacff5092ec7
SSDEEP
File Typeunknown
Size1.6 KB
Sources52
Downloads0
First SeenDec 5, 2022
Last SeenFeb 4, 2023
Download sample (.zip, password: infected)

Live malware — handle only in an isolated analysis environment.

Indicators of Compromise

Values are defanged (e.g. hxxp://, [.]) — not live links.

ipv4 (1)

  • 113[.]106[.]167[.]11

url (11)

  • hxxp://113[.]106[.]167[.]11/x/irq0
  • hxxp://113[.]106[.]167[.]11/x/irq1
  • hxxp://113[.]106[.]167[.]11/x/irq2
  • hxxp://113[.]106[.]167[.]11/x/pty
  • hxxp://113[.]106[.]167[.]11/x/tty0
  • hxxp://113[.]106[.]167[.]11/x/tty1
  • hxxp://113[.]106[.]167[.]11/x/tty2
  • hxxp://113[.]106[.]167[.]11/x/tty3
  • hxxp://113[.]106[.]167[.]11/x/tty4
  • hxxp://113[.]106[.]167[.]11/x/tty5
  • hxxp://113[.]106[.]167[.]11/x/tty6