Back to Malware Drops
f79531a25fac947e040fb4802ccb9f4502898eface1f2de987476f8ad732dae1
MD5e8ecc67a35efae8813e5af5d72763993
SSDEEP—
File Typeunknown
Size1.6 KB
Sources34
Downloads0
First SeenDec 23, 2022
Last SeenDec 23, 2022
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (1)
- server[.]ssh
ipv4 (1)
- 45[.]67[.]230[.]216
url (14)
- hxxp://45[.]67[.]230[.]216/b/arc;
- hxxp://45[.]67[.]230[.]216/b/arm;
- hxxp://45[.]67[.]230[.]216/b/arm5;
- hxxp://45[.]67[.]230[.]216/b/arm6;
- hxxp://45[.]67[.]230[.]216/b/arm7;
- hxxp://45[.]67[.]230[.]216/b/i586;
- hxxp://45[.]67[.]230[.]216/b/i686;
- hxxp://45[.]67[.]230[.]216/b/m68k;
- hxxp://45[.]67[.]230[.]216/b/mips;
- hxxp://45[.]67[.]230[.]216/b/mpsl;
- hxxp://45[.]67[.]230[.]216/b/sh4;
- hxxp://45[.]67[.]230[.]216/b/spc;
- hxxp://45[.]67[.]230[.]216/b/x86;
- hxxp://45[.]67[.]230[.]216/b/x86_64;