Overview

overview

10

Static

static

10

0ba6b899ef...18.exe

windows7-x64

10

0ba6b899ef...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0ba6b899efd36a70a14563e55f109788_JaffaCakes118

  • Size

    104KB

  • MD5

    0ba6b899efd36a70a14563e55f109788

  • SHA1

    7e47b24c09c5c9628b43691137c4b0e023297a16

  • SHA256

    fdb33c00bbddf5603ebf28fd503852f7607928a06fee364387c0d192362e3b0c

  • SHA512

    4bfc462d23bc66207beae3ec32ea07261b27a66c0a85a625ea8c8a72b60504820752e08075c98f73d74a97216fa4592b4121b2399a1fff870961bed498a18539

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

https://vaullo.tk/dron/Panel/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

  • Lokibot family
    lokibot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ba6b899efd36a70a14563e55f109788_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    0239fd611af3d0e9b0c46c5837c80e09


    Headers

    Imports

    Sections