Overview

overview

10

Static

static

10

1f87ec0c55...4e.exe

windows7-x64

10

1f87ec0c55...4e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5e924002b4bf7fd9e352343108e3f540_JaffaCakes118

  • Size

    50KB

  • MD5

    5e924002b4bf7fd9e352343108e3f540

  • SHA1

    0e189c6d66c63d3a001778d74743209cf93f6342

  • SHA256

    fc8556b22182db7fb639bb208764ec4f49e625a95d6a07562c3614316a4d1f40

  • SHA512

    b1c6b8e297f58c4e231e804b1cfa35795b0136e9281ed482fa0afe6e64422e991b686f22a98ca49564c4a45ff370722f1e38e52c8343c25298635b3be7a50e21

  • SSDEEP

    768:NKCqydsX95Cwip2159aJ8llhqDTVT6KzCuGks8c/Prv1WzB6LtfbnUiPYC236U4P:Ne7tHipEp1uhzdtckBat06UKXF31KG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://omann.ir/swagger/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

  • Lokibot family
    lokibot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5e924002b4bf7fd9e352343108e3f540_JaffaCakes118
    .gz
  • 1f87ec0c553dfc88312305cd316b469eb645384e
    .exe windows:5 windows x86 arch:x86

    0239fd611af3d0e9b0c46c5837c80e09


    Headers

    Imports

    Sections