Back to Malware Drops
fd7bb9f17c1dd6f4516bb3a3dcc515f561f68dcf18f32aaba88c92f2df99e307
MD534c17e39acb45b40c5591febb5346346
SSDEEP—
File Typetext/x-script
Size2.6 KB
Sources3
Downloads0
First SeenSep 20, 2020
Last SeenSep 21, 2020
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Originating Attacks
Honeypot sessions that dropped this sample. Drop URLs are defanged; commands are shown verbatim and are not links.
- Dropped in this session (no command captured).Sep 20, 2020, 9:06:10 AMView attack session
- Dropped in this session (no command captured).Sep 20, 2020, 9:06:10 AMView attack session
- Dropped in this session (no command captured).Sep 20, 2020, 9:06:10 AMView attack session
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
ipv4 (1)
- 45[.]145[.]185[.]94
url (26)
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]arc;
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]arc;cat
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]arm;
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]arm5;
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]arm5;cat
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]arm6;
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]arm6;cat
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]arm7;
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]arm7;cat
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]arm;cat
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]m68k;
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]m68k;cat
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]mips;
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]mips64;
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]mips64;cat
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]mips;cat
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]mpsl;
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]mpsl;cat
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]ppc;
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]ppc;cat
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]sh4;
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]sh4;cat
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]spc;
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]spc;cat
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]x86;
- hxxp://45[.]145[.]185[.]94/Otpzl/7rtya[.]x86;cat