Back to Malware Drops

e157ed8de3ca37e9be1f6f48f1b78cab567a0c84648425b5d6d307fd0af602f6

MD55da4c6b4589633d6e69283583518d0f2
SSDEEP1536:jUI3Pnc+ebk6fPqJ3DoFfQHZg924Du0LFn4d+oue1FfUJ:QIfzebZfPATodQG92T0Z4QougFA
File Typeapplication/x-executable
Size78.3 KB
Sources9
Downloads0
First SeenJul 16, 2023
Last SeenJul 16, 2023
Download sample (.zip, password: infected)

Live malware — handle only in an isolated analysis environment.

Indicators of Compromise

Values are defanged (e.g. hxxp://, [.]) — not live links.

btc (1)

  • 3612f843a42db38f48f59d2a3597e19c

domain (3)

  • a[.]out
  • lblink[.]selfrep
  • schemas[.]xmlsoap[.]org

ipv4 (1)

  • 193[.]42[.]32[.]40

url (3)

  • hxxp://193[.]42[.]32[.]40/mpsl;
  • hxxp://schemas[.]xmlsoap[.]org/soap/encoding/
  • hxxp://schemas[.]xmlsoap[.]org/soap/envelope/