Back to Malware Drops
fb54f85b24926d13197da64390dd924d0631d62bd4f43cecc0fe8910a9e39947
MD508f6e237dfa677366a5728bedb3e9500
SSDEEP—
File Typetext/x-script
Size1.6 KB
Sources3
Downloads0
First SeenNov 24, 2024
Last SeenNov 24, 2024
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
ipv4 (1)
- 45[.]125[.]66[.]203
url (20)
- hxxp://45[.]125[.]66[.]203/jklarm4;
- hxxp://45[.]125[.]66[.]203/jklarm4;cat
- hxxp://45[.]125[.]66[.]203/jklarm5;
- hxxp://45[.]125[.]66[.]203/jklarm5;cat
- hxxp://45[.]125[.]66[.]203/jklarm6;
- hxxp://45[.]125[.]66[.]203/jklarm6;cat
- hxxp://45[.]125[.]66[.]203/jklarm7;
- hxxp://45[.]125[.]66[.]203/jklarm7;cat
- hxxp://45[.]125[.]66[.]203/jklm68k;
- hxxp://45[.]125[.]66[.]203/jklm68k;cat
- hxxp://45[.]125[.]66[.]203/jklmips;
- hxxp://45[.]125[.]66[.]203/jklmips;cat
- hxxp://45[.]125[.]66[.]203/jklmpsl;
- hxxp://45[.]125[.]66[.]203/jklmpsl;cat
- hxxp://45[.]125[.]66[.]203/jklppc;
- hxxp://45[.]125[.]66[.]203/jklppc;cat
- hxxp://45[.]125[.]66[.]203/jklsh4;
- hxxp://45[.]125[.]66[.]203/jklsh4;cat
- hxxp://45[.]125[.]66[.]203/jklx86;
- hxxp://45[.]125[.]66[.]203/jklx86;cat