Overview

overview

10

Static

static

10

stealer_aplib.exe

windows7-x64

10

stealer_aplib.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    stealer_aplib.exe

  • Size

    104KB

  • MD5

    b06fe24ce99fd0b03826a4ca7c0e3d4a

  • SHA1

    9c72df639aa6eff1ae9e93ab97beee8c57760b61

  • SHA256

    5a70e4643e5b694e39b2f1aec0a42453499cdc36c7bf74b88a499794efea177e

  • SHA512

    b510bb78081b039de0f3851947e701b85e93a24c78c80f2eb5ab113f6b7d2612a0e9b03d77718135516f675972862790deb9fd258e68948f632dd3353ad427ff

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://iklok.us/SA/L/900Z.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • stealer_aplib.exe
    .exe windows x86

    0239fd611af3d0e9b0c46c5837c80e09


    Headers

    Imports

    Sections