General

  • Target

    2c030514c8f3acf13476805c67a22811.exe

  • Size

    104KB

  • MD5

    2c030514c8f3acf13476805c67a22811

  • SHA1

    9ca441fa63b9803ffd5dcb6f274076281c01ac2a

  • SHA256

    4872ccaa8702d45ea34ec24c98d8af427507b12d37005da26efc4b2569df534e

  • SHA512

    4cdf4f1483d562e75dbc41266584c8bacab04adc538e4ebd532e0671382bb17ed3526d4be7e254182b347ec8d5bd2edef685209f944ec02bc49b03e52ec747a1

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://208.67.105.148/fresh2/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 2c030514c8f3acf13476805c67a22811.exe
    .exe windows x86

    0239fd611af3d0e9b0c46c5837c80e09


    Headers

    Imports

    Sections