Back to Malware Drops
ea0bdc1803529bcfa0f6188c15a373ae977699e7f6362d3cc34797c3f857a5d4
MD5044a846325b0a1a2a62139e419e0c460
SSDEEP—
File Typetext/x-script
Size3.7 KB
Sources3
Downloads0
First SeenDec 3, 2024
Last SeenDec 3, 2024
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (6)
- ub8ehJSePAfc9FYqZIT6[.]arc
- ub8ehJSePAfc9FYqZIT6[.]arm
- ub8ehJSePAfc9FYqZIT6[.]mips
- ub8ehJSePAfc9FYqZIT6[.]mpsl
- ub8ehJSePAfc9FYqZIT6[.]ppc
- ub8ehJSePAfc9FYqZIT6[.]sparc
ipv4 (1)
- 154[.]213[.]187[.]149
url (30)
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]arc;
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]arc;cat
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]arm;
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]arm5;
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]arm5;cat
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]arm6;
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]arm6;cat
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]arm7;
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]arm7;cat
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]arm;cat
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]i686;
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]i686;cat
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]m68k;
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]m68k;cat
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]mips;
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]mips64;
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]mips64;cat
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]mips;cat
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]mpsl;
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]mpsl;cat
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]ppc;
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]ppc;cat
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]sh4;
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]sh4;cat
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]sparc;
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]sparc;cat
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]x86;
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]x86_64;
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]x86_64;cat
- hxxp://154[.]213[.]187[.]149/HideChaotic/ub8ehJSePAfc9FYqZIT6[.]x86;cat