Back to Malware Drops

f650fa0d0858da0669a9d21afb7c866ddf354a39752b4caa26ae8fdbf3229ff8

MD5cba1164fe12c6037e0d55655efe46acc
SSDEEP
File Typeunknown
Size1.6 KB
Sources3
Downloads0
First SeenMar 10, 2023
Last SeenMar 13, 2023
Download sample (.zip, password: infected)

Live malware — handle only in an isolated analysis environment.

Indicators of Compromise

Values are defanged (e.g. hxxp://, [.]) — not live links.

ipv4 (1)

  • 178[.]128[.]110[.]66

url (11)

  • hxxp://178[.]128[.]110[.]66/x/irq0
  • hxxp://178[.]128[.]110[.]66/x/irq1
  • hxxp://178[.]128[.]110[.]66/x/irq2
  • hxxp://178[.]128[.]110[.]66/x/pty
  • hxxp://178[.]128[.]110[.]66/x/tty0
  • hxxp://178[.]128[.]110[.]66/x/tty1
  • hxxp://178[.]128[.]110[.]66/x/tty2
  • hxxp://178[.]128[.]110[.]66/x/tty3
  • hxxp://178[.]128[.]110[.]66/x/tty4
  • hxxp://178[.]128[.]110[.]66/x/tty5
  • hxxp://178[.]128[.]110[.]66/x/tty6