Overview

overview

7

Static

static

3

LokiRAT_Relapse.exe

windows7-x64

7

LokiRAT_Relapse.exe

windows10-2004-x64

7

SkinSoft.OSSkin.dll

windows7-x64

1

SkinSoft.OSSkin.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    42c2661a0c918a936e55c4d7905cb088_JaffaCakes118

  • Size

    2.6MB

  • MD5

    42c2661a0c918a936e55c4d7905cb088

  • SHA1

    e8ec865bf8c776e8575adbd32da7951740669af5

  • SHA256

    b7140975c4faf379b789f1d09a1ddb7ccf1a83c15a39dd47eca706d7963a9bf5

  • SHA512

    51739dfd6efb6508dc65abf8ab5c59d69b48f1cea351a6c91071f1c3019abeabd2a9f2b7472a4d66b5934b1faaac4a6688f69ed3e0d63610c7c866b7c13329e9

  • SSDEEP

    49152:f/9cnSQQ8xNkkjovDCg/gkheoUoiMAN/gy0xoCNJpixfBnaxF:fqy8/kk2eoUqVBNfpix5nSF

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 42c2661a0c918a936e55c4d7905cb088_JaffaCakes118
    .zip

    Password: infected

  • Loki Rat.rar
    .rar
  • LokiRAT_Relapse.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • SkinSoft.OSSkin.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections