General

  • Target

    400000.locyo.exe

  • Size

    648KB

  • MD5

    88b4d9974b403f47e0d4edd6c83f8e00

  • SHA1

    effc3e7164b3107dbc564283c3e1bbfdb51cdf3f

  • SHA256

    4380251b9523800d1e3c788b26cc31480d748d27f8ec1d33202702f45fb6e352

  • SHA512

    e1640dcdbb005eac537447f63e12b25ce7c6099b04a0084176debfc52b994e6a7701b15cfe2e71549fccb123faaa316dacaf3a7dc498f8d6605923fb92dc0cc8

  • SSDEEP

    1536:LXzvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqbIzmdM:LsSHIG6mQwGmfOQd8YhY0/EeUG

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 400000.locyo.exe
    .exe windows x86

    9bec5d6b8cb7f18c72e5df0cc2b0d4a1


    Headers

    Imports

    Sections