Overview

overview

10

Static

static

10

TRANSFER.exe

windows7-x64

10

TRANSFER.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    transferencia bancaria..img

  • Size

    1.2MB

  • MD5

    26910eb24814762ee566c556871d9e16

  • SHA1

    98e1dc3116afb215dba3b1ac291213e462311551

  • SHA256

    fe8952b964843bae90fa1bfedb463a49fec003b8bffe4452a33e65f3fdd4ad62

  • SHA512

    e32bcacb93dbfa6e68b3335181b581beea392b1281d7271b9352f594e845866372ca5508584059c651fd9cf0be1dd1846fdbb1846bae823eabd07f6767f216c6

  • SSDEEP

    1536:PzvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:0SHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://sempersim.su/gl3/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • transferencia bancaria..img
    .iso
  • TRANSFER.EXE
    .exe windows x86

    0239fd611af3d0e9b0c46c5837c80e09


    Headers

    Imports

    Sections