General

  • Target

    transferencia bancaria..exe

  • Size

    104KB

  • MD5

    a14ced0f860d615120819ba8c4662633

  • SHA1

    2ccc73c37dc6d6e8b3f3bf99b183d8aea254a7e0

  • SHA256

    5b52a7abb37fc814a8381cd448f182770995352ddb712b366612ee4d1b051dcc

  • SHA512

    e7040bb9a261fdfb832f2ae2b9486eba482bc9efaef408234adbe4fcdd7eda3b0171aa34fb9719d53f38d4b21fb7772d059939902194c89f0ec02d33325bc4f3

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://sempersim.su/gl3/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • transferencia bancaria..exe
    .exe windows x86

    0239fd611af3d0e9b0c46c5837c80e09


    Headers

    Imports

    Sections