General
-
Target
3c4a68ec26cc3b0347e8497bddbe6655_JaffaCakes118
-
Size
218KB
-
MD5
3c4a68ec26cc3b0347e8497bddbe6655
-
SHA1
e7f7d46571b8e3c62338f7697ccee67f847625be
-
SHA256
b8c56bd1ed20763027eb95453011bfea2dc551bb478fb1be205d28961c08cd3f
-
SHA512
5dec0f4c201364002eb04e79633070b3854229391d99a86b7771a68aa11091222b9527808341c5266cb9427ee7ab928a9267a01dea08755837ab761c9e6e5de8
-
SSDEEP
3072:CGszhuqNHxWezysRFCgJmqBKHJQSZHJYF4q50c2KdZO4SHIG6mQwGmfOQd8YhY01:EzBJQez/0gcqoW0lgO4cd6bUfFdXThU
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
https://adimma.xyz/egom/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
Files
-
3c4a68ec26cc3b0347e8497bddbe6655_JaffaCakes118.jpg