General
-
Target
7c6d32a7d66f448cbacaeee1a6d50395_JaffaCakes118
-
Size
490KB
-
Sample
240528-k4qjgaef92
-
MD5
7c6d32a7d66f448cbacaeee1a6d50395
-
SHA1
3843adb45a6897d8adebc275ec8107203cffa431
-
SHA256
a8db322a335647cd5e37dc701a2b64788be685e8880ea6335fc2c9e6e6e38a88
-
SHA512
da5c1913414061e9ad1430959e53dd419742f2ec2cb26f18ac765b178aa4bb9d1e8a069dc856c2da556343f656b2dbb33431a829b8a5132e5abd7b8c1bd9cfad
-
SSDEEP
12288:lgbZNlBnYKoYsC6/9aqEvw1++L5X6kGsf5mnIH2hz2hcY:GbZNfYKoV/90I1+q5X6kGsh2E2Ur
Malware Config
Extracted
lokibot
http://taolay12.ru/Panel/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
NEW SALE CIFF ORDER.exe
-
Size
1015KB
-
MD5
ea6bd8a856fd5939df9b0104117bf8a3
-
SHA1
3859a5a77b850311d32dedbf5a54b77c889a8748
-
SHA256
402b48eeeeafa1685df024878c883f2674632dfe511f8238d3dcea35fc06840b
-
SHA512
b94863f61e7b7419bfc50d6968689c47c22b9092c0c9f936f37d097b5fd4e5af3eb1201fb0234262bf6fbc60f5e6b3d4aa0974d9a5ff23e3430adfd01cbaea4d
-
SSDEEP
24576:Eg5zF/FSAIjCaGH+xkWlsHLwhO/9YmaDn6rr/qKoSBoAwXKN:ZYfaLRYmaDnoqKoS6fK
Score10/10-
Lokibot
Lokibot is a Password and CryptoCoin Wallet Stealer.
-