Overview

overview

10

Static

static

10

582923daab...cb.exe

windows7_x64

10

582923daab...cb.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    582923daab47911bd6216946e5e38e76b20019b19e863c2e3e146185253db2cb

  • Size

    144KB

  • MD5

    dca4bddba0c7c1c658ef5fe696aa9a25

  • SHA1

    963260bdec038dfa22d43415360aa560c75a33d4

  • SHA256

    582923daab47911bd6216946e5e38e76b20019b19e863c2e3e146185253db2cb

  • SHA512

    74ec8e87841b9f4ca27b740609e119ecfe1c65b6f2ce3567ebb9b8664068f5742eda5ada79f9c2c9bdf0db0f5aa67eca0e6109735a43a5e2e475a912c440a885

  • SSDEEP

    1536:JxqjQ+P04wsmJClYCGDwRcMkVQd8YhY0/EqfIzmdmHzvQSZpGS4/31A6mQgL28:sr85CTGmfOQd8YhY0/EqUGXSHIG6mQw

Score
10/10
neshtalokibot

Malware Config

Extracted

Family

lokibot

C2

http://dennismariman.com/giantech/Panel/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

  • Detect Neshta Payload 1 IoCs
  • Lokibot family
    lokibot
  • Neshta family
    neshta

Files

  • 582923daab47911bd6216946e5e38e76b20019b19e863c2e3e146185253db2cb
    .exe windows x86


    Code Sign

    Headers

    Sections