Back to Malware Drops
ea40ecec0b30982fbb1662e67f97f0e9d6f43d2d587f2f588525fae683abea73
MD5f9191bab1e834d4aef3380700639cee9
SSDEEP12288:VeRvuKqiVZ4En5drNK0pPEfJKlHZ8mG97Qxee6yzmx:VIv/qiVNHNDEfJKHZ8mG9QeeO
File Typeapplication/x-executable
Size549.1 KB
Sources58
Downloads0
First SeenNov 20, 2022
Last SeenJun 4, 2023
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (15)
- a[.]out
- bugs[.]html
- cron[.]hourly
- daemon[.]cfg
- data[.]rel[.]ro
- dkuug[.]dk
- gconv-modules[.]cache
- glibc-ld[.]so
- got[.]plt
- ld[.]so
- ld[.]so[.]cache
- note[.]ABI
- resolv[.]conf
- s[.]sh
- www[.]gnu[.]org
email (1)
- keld@dkuug[.]dk
ipv4 (2)
- 114[.]114[.]114[.]114
- 8[.]8[.]8[.]8
url (1)
- hxxp://www[.]gnu[.]org/software/libc/bugs[.]html