Overview

overview

10

Static

static

10

80341c6d17...18.exe

windows7-x64

1

80341c6d17...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    80341c6d17d41be94132ad42d0b2ca9b_JaffaCakes118

  • Size

    1.1MB

  • MD5

    80341c6d17d41be94132ad42d0b2ca9b

  • SHA1

    0bfac16a9dea06a55210b5af666748223d43d33b

  • SHA256

    20c23f7f807e5f0188a728af0e6a8b88fd5c34d2e063b9cd31a7c5cd55df3e4c

  • SHA512

    9b694ba836972e465d4c3cf11fd8f28d2510d363764890af25b567cec7adaa579bc4b7752a9b1a015e4a96b4560f99a79136d5067ef9eb1addaa71ffa181d67b

  • SSDEEP

    12288:8bkFmQkSZkM/JyuzWfCK9micSAOyP/gQh3XjjJHF2JV8NdzxfpB+vmbeTxFwPXKP:8w4+kM/Jyu+77AOywQhHzxfYEeVFwXKP

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://www.gtsworld.in/bobby/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

  • Lokibot family
    lokibot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 80341c6d17d41be94132ad42d0b2ca9b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections