Back to Malware Drops

d8c8eaf6eb2313e6921b375fc3099456d1c6b7b656f181c359541628c37bbca7

MD5912bdda0ddf9ed2ace0b546ea24cc8ff
SSDEEP384:t0FINvSd5o/DsLIywe4Xz2Ye6rDBzgHZ4zRZn7hElu/tOJJJ2JJJuOfvuy/97M8L:STvLIywe4Xz2YeIDBzgHShFMSZP
File Typetext/x-script
Size41.0 KB
Sources273
Downloads0
First SeenFeb 15, 2023
Last SeenFeb 15, 2023
Download sample (.zip, password: infected)

Live malware — handle only in an isolated analysis environment.

Indicators of Compromise

Values are defanged (e.g. hxxp://, [.]) — not live links.

domain (3)

  • cmd[.]exe
  • K[.]Mardam
  • unreal[.]life

ipv4 (1)

  • 159[.]223[.]39[.]233

url (1)

  • hxxp://([^/: