Overview

overview

10

Static

static

10

d83aada50d...d3.exe

windows7-x64

10

d83aada50d...d3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d83aada50d99fea6e028c489262a65d3.exe

  • Size

    104KB

  • MD5

    d83aada50d99fea6e028c489262a65d3

  • SHA1

    6cf28fe4dc8076e206c494efa4d128fe9722a509

  • SHA256

    9a69989cad16e4d2f0eda7777f0272e18f49fd38d12d4cf1e5d434aa02bf2930

  • SHA512

    aa7390ff977433ff46c7b6d052c218c10232c4e9b09c3d3c362107608ea71d6f444ec1f49c3af74dc2e675818ddfdaa80b4e99937f09256c6532520963477b89

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq7Izmd:nSHIG6mQwGmfOQd8YhY0/E2UG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://sempersim.su/gm14/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • d83aada50d99fea6e028c489262a65d3.exe
    .exe windows x86

    0239fd611af3d0e9b0c46c5837c80e09


    Headers

    Imports

    Sections