Static

static

10

Resubmissions

16/05/2022, 07:51

220516-jp8k3aaaen 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    14905aa33cddc61231d18a5064627cfd2b4f5d1c8a8603b40a5fda3c08032633.exe

  • Size

    105KB

  • MD5

    10d9d9728eaaf0e78712829ec90eaa2b

  • SHA1

    d3aea604a58aae54f09d37d7c81036d54448023f

  • SHA256

    14905aa33cddc61231d18a5064627cfd2b4f5d1c8a8603b40a5fda3c08032633

  • SHA512

    b822b8746411295d10740014d4f3968861ff2cf25302151303f347fd5756099c1a81e5a6582ab3619c4150928f3bd022f0d5f6a98a61cca73ba8b781abe4d70d

  • SSDEEP

    1536:kzvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqcIzmdSw:/SHIG6mQwGmfOQd8YhY0/E1UGSw

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://37.0.11.227/droidtwo/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 14905aa33cddc61231d18a5064627cfd2b4f5d1c8a8603b40a5fda3c08032633.exe
    .exe windows x86

    0239fd611af3d0e9b0c46c5837c80e09


    Headers

    Imports

    Sections