Back to Malware Drops
e9e9f498039500e22875972412b4ccbaf0b6a47a54493a0ed874a1255e2024f9
MD57f874db4a1d83deaf25c26a3f95ff025
SSDEEP—
File Typetext/x-script
Size1.7 KB
Sources132
Downloads0
First SeenDec 26, 2022
Last SeenDec 31, 2022
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (4)
- gummy[.]mips
- gummy[.]mipsel
- gummy[.]ppc
- gummy[.]sparc
ipv4 (1)
- 193[.]42[.]33[.]81
url (12)
- hxxp://193[.]42[.]33[.]81/gummy[.]arm4;
- hxxp://193[.]42[.]33[.]81/gummy[.]arm5;
- hxxp://193[.]42[.]33[.]81/gummy[.]arm6;
- hxxp://193[.]42[.]33[.]81/gummy[.]i586;
- hxxp://193[.]42[.]33[.]81/gummy[.]i686;
- hxxp://193[.]42[.]33[.]81/gummy[.]m68k;
- hxxp://193[.]42[.]33[.]81/gummy[.]mips;
- hxxp://193[.]42[.]33[.]81/gummy[.]mipsel;
- hxxp://193[.]42[.]33[.]81/gummy[.]ppc;
- hxxp://193[.]42[.]33[.]81/gummy[.]sh4;
- hxxp://193[.]42[.]33[.]81/gummy[.]sparc;
- hxxp://193[.]42[.]33[.]81/gummy[.]x86;