Overview

overview

10

Static

static

10

c9038e31f7...ab.exe

windows7-x64

7

c9038e31f7...ab.exe

windows10-2004-x64

10

Resubmissions

13/03/2023, 15:34

230313-szz64sda7y 10

11/03/2023, 16:43

230311-t8rf1aae46 10

11/03/2023, 16:25

230311-tw8jracc3z 10

11/03/2023, 16:24

230311-twtqlacc3y 10

11/03/2023, 15:48

230311-s8za6sac37 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c9038e31f798119d9e93e7eafbdd3e0f215e24ee2200fcd2a3ba460d549894ab

  • Size

    104KB

  • MD5

    e4331c292a663fe223a01e7773d896f8

  • SHA1

    f69948ef3675c3818e75ac698d5c60cc6d0784fc

  • SHA256

    c9038e31f798119d9e93e7eafbdd3e0f215e24ee2200fcd2a3ba460d549894ab

  • SHA512

    a4f0f240ac4698e7719345e739de7917e816273c9d7fcbd91827e5581417096b820d1b753841d3a8ff0766b815f76cc2a52ae57fb1b5a3bbc3d93c2e11799118

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq8Izmd:nSHIG6mQwGmfOQd8YhY0/E5UG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://104.223.143.132/ecflix/Panel/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • c9038e31f798119d9e93e7eafbdd3e0f215e24ee2200fcd2a3ba460d549894ab
    .exe windows x86

    Password: infected

    0239fd611af3d0e9b0c46c5837c80e09


    Headers

    Imports

    Sections