Back to Malware Drops
fdcccc1f7c3edf0835d468795a518586b0aba55cd0f7083a8ea2970b99e8d043
MD599cd6b56c1772767c79f2d46b0f06f15
SSDEEP—
File Typetext/x-script
Size2.0 KB
Sources11
Downloads0
First SeenJan 18, 2023
Last SeenJan 18, 2023
Download sample (.zip, password: infected)
Live malware — handle only in an isolated analysis environment.
Indicators of Compromise
Values are defanged (e.g. hxxp://, [.]) — not live links.
domain (4)
- shemale[.]mips
- shemale[.]mipsel
- shemale[.]ppc
- shemale[.]sparc
ipv4 (1)
- 45[.]12[.]253[.]93
url (13)
- hxxp://45[.]12[.]253[.]93/shemale[.]arm4;
- hxxp://45[.]12[.]253[.]93/shemale[.]arm5;
- hxxp://45[.]12[.]253[.]93/shemale[.]arm6;
- hxxp://45[.]12[.]253[.]93/shemale[.]arm7;
- hxxp://45[.]12[.]253[.]93/shemale[.]i586;
- hxxp://45[.]12[.]253[.]93/shemale[.]i686;
- hxxp://45[.]12[.]253[.]93/shemale[.]m68k;
- hxxp://45[.]12[.]253[.]93/shemale[.]mips;
- hxxp://45[.]12[.]253[.]93/shemale[.]mipsel;
- hxxp://45[.]12[.]253[.]93/shemale[.]ppc;
- hxxp://45[.]12[.]253[.]93/shemale[.]sh4;
- hxxp://45[.]12[.]253[.]93/shemale[.]sparc;
- hxxp://45[.]12[.]253[.]93/shemale[.]x86;