Overview

overview

10

Static

static

10

7ac9c1bef9...18.exe

windows7-x64

1

7ac9c1bef9...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7ac9c1bef944c66ff1c5bf07cb2ab5f7_JaffaCakes118

  • Size

    4.5MB

  • Sample

    240527-2kclyadg22

  • MD5

    7ac9c1bef944c66ff1c5bf07cb2ab5f7

  • SHA1

    4fb48224897ed8d9534fc2b24fe8bf063250b682

  • SHA256

    3a501801bc7a6670ee8d6fff435b6346e89b8b0f029fc90da3cd5d375d3a6bf5

  • SHA512

    2499c23bcd31f90141531ee530899875b16c6f8486daaddd7260dcfc83bf583753e12fe6b5565f978c7f1a41d0ce46869c3df32010acb7d0d602f3c605b536f5

  • SSDEEP

    49152:+BDJEBNb8OYi0qx0wzqkeXdoB959F7XF4oF0QbhV3D2QQe2yAqfjO:+BD2ACqkeXumoaOZD2yoqi

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://www.hornelink.cn/new1/Panel/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      7ac9c1bef944c66ff1c5bf07cb2ab5f7_JaffaCakes118

    • Size

      4.5MB

    • MD5

      7ac9c1bef944c66ff1c5bf07cb2ab5f7

    • SHA1

      4fb48224897ed8d9534fc2b24fe8bf063250b682

    • SHA256

      3a501801bc7a6670ee8d6fff435b6346e89b8b0f029fc90da3cd5d375d3a6bf5

    • SHA512

      2499c23bcd31f90141531ee530899875b16c6f8486daaddd7260dcfc83bf583753e12fe6b5565f978c7f1a41d0ce46869c3df32010acb7d0d602f3c605b536f5

    • SSDEEP

      49152:+BDJEBNb8OYi0qx0wzqkeXdoB959F7XF4oF0QbhV3D2QQe2yAqfjO:+BD2ACqkeXumoaOZD2yoqi

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks