Sign In|Register
Back to Malware Drops

e715d46c4c19415d1f47f669e8cd248fa04cfffa7d593040d4e96e01e23b9de3

MD5771140dd15a2875910977903789ae7d8
SSDEEP—
File Typetext/x-script
Size2.2 KB
Sources29
Downloads0
First SeenFeb 13, 2021
Last SeenFeb 13, 2021
Download sample (.zip, password: infected)

Live malware — handle only in an isolated analysis environment.

Originating Attacks

Honeypot sessions that dropped this sample. Drop URLs are defanged; commands are shown verbatim and are not links.

Indicators of Compromise

Values are defanged (e.g. hxxp://, [.]) — not live links.

ipv4 (1)

  • 45[.]130[.]138[.]70

url (24)

  • hxxp://45[.]130[.]138[.]70/SBIDIOT/arm;
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/arm6;
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/arm6;cat
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/arm7;
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/arm7;cat
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/arm;cat
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/m68k;
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/m68k;cat
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/mips;
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/mips;cat
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/mpsl;
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/mpsl;cat
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/ppc;
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/ppc;cat
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/root;
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/root;cat
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/rtk;
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/rtk;cat
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/sh4;
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/sh4;cat
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/x86;
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/x86;cat
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/zte;
  • hxxp://45[.]130[.]138[.]70/SBIDIOT/zte;cat