General

  • Target

    d1d27153da7a29dd0d1a7a593d895cb3560f5e2851303aa78fa16122abe196b3

  • Size

    384KB

  • MD5

    64ec06e8adb8b91043ef651cce01e515

  • SHA1

    398a3b4e1c359266068b40a6725a6f627abc9b80

  • SHA256

    d1d27153da7a29dd0d1a7a593d895cb3560f5e2851303aa78fa16122abe196b3

  • SHA512

    5f34638c8db21514a5060f7b96da523ac5d3363f69d76d642771503f9bffeb21c71043d02a8c5d21766ac2a609bfa80b7338c7b63502f2a313044b6f23f56bec

  • SSDEEP

    6144:wjL4OG3MdSFQs9J0POxRL+cd6bUfFdXT8Umsd1fTsim:wjkJ8dSOnPOr+wPXTE

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://171.22.30.147/gk1/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • d1d27153da7a29dd0d1a7a593d895cb3560f5e2851303aa78fa16122abe196b3
    .dll windows x86


    Headers

    Sections