Overview

overview

10

Static

static

10

7ac9c1bef9...18.exe

windows7-x64

1

7ac9c1bef9...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7ac9c1bef944c66ff1c5bf07cb2ab5f7_JaffaCakes118

  • Size

    4.5MB

  • MD5

    7ac9c1bef944c66ff1c5bf07cb2ab5f7

  • SHA1

    4fb48224897ed8d9534fc2b24fe8bf063250b682

  • SHA256

    3a501801bc7a6670ee8d6fff435b6346e89b8b0f029fc90da3cd5d375d3a6bf5

  • SHA512

    2499c23bcd31f90141531ee530899875b16c6f8486daaddd7260dcfc83bf583753e12fe6b5565f978c7f1a41d0ce46869c3df32010acb7d0d602f3c605b536f5

  • SSDEEP

    49152:+BDJEBNb8OYi0qx0wzqkeXdoB959F7XF4oF0QbhV3D2QQe2yAqfjO:+BD2ACqkeXumoaOZD2yoqi

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://www.hornelink.cn/new1/Panel/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

  • Lokibot family
    lokibot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7ac9c1bef944c66ff1c5bf07cb2ab5f7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections