2024-10-23 Ping me (Malware)

Content from printing instead of executing

Dim sh, ips, i: Set sh = CreateObject("WScript.Shell"):ips = Array("102.108.97.103", "123.54.100.49", "98.54.48.52", "98.98.49.98", "54.100.97.51", "50.98.56.98", "98.99.97.57", "101.50.54.100", "53.49.53.56", "57.125.35.35"):For i = 0 To UBound(ips): sh.Run "cmd /Q/c ping " & ips(i), 0, False:Next

$ips = @('102.108.97.103', '123.54.100.49', '98.54.48.52', '98.98.49.98', '54.100.97.51', '50.98.56.98', '98.99.97.57', '101.50.54.100', '53.49.53.56', '57.125.35.35')

IPs list

102.108.97.103
123.54.100.49
98.54.48.52
98.98.49.98
54.100.97.51
50.98.56.98
98.99.97.57
101.50.54.100
53.49.53.56
57.125.35.35

VirusTotal check on the IP’s

Can see a reply from one for the addresses, others not so much.

Ping the one with a response.

Looking at the data

Analyze the sequence and print the flag.txt

flag{6d1b604bb1b6da32b8bbca9e26d51589}