Back to Malware Drops

f585c0bbae2950dfc3bd85cdc78cab9f371b7714fbb8c3a4ca93edd950c12942

MD5aaa61b22760bbd34cc96ba21684864c2
SSDEEP1536:VMEL4NUSALrjvvH/nI9vY522U4vOaqZLyacZl8:VMySALvH/n2w52YGLG8
File Typeapplication/x-executable
Size98.3 KB
Sources1
Downloads0
First SeenJan 17, 2023
Last SeenJan 17, 2023
Download sample (.zip, password: infected)

Live malware — handle only in an isolated analysis environment.

Indicators of Compromise

Values are defanged (e.g. hxxp://, [.]) — not live links.

domain (13)

  • DCD[.]DCE
  • DDb[.]DDe
  • dosset[.]dtdb
  • gnu[.]version
  • got[.]plt
  • ld-linux[.]so
  • libc[.]so
  • libpthread[.]so
  • note[.]ABI
  • rc[.]local
  • rel[.]dyn
  • rel[.]plt
  • UDsE[.]Dx

ipv4 (1)

  • 114[.]55[.]106[.]38