Overview

overview

10

Static

static

10

b514e1ca81...18.exe

windows7-x64

3

b514e1ca81...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b514e1ca810c72dd3a2695b96bd3c3e7_JaffaCakes118

  • Size

    714KB

  • MD5

    b514e1ca810c72dd3a2695b96bd3c3e7

  • SHA1

    e012e47c03a382650bfe622ca3366f179850a50b

  • SHA256

    10d5b87ca712f37ee567ec47cef40829994fc5fd9e928516679d2dfa43e5e781

  • SHA512

    c7144da2dba8fe928b424137a5e7dd9309cb11c2aa2167f8b52befc673135b21fccdc098ef34154561ce2cad5aa18a292da78825c4beb6c75fd7c6e82ba82419

  • SSDEEP

    1536:cccvVn+/ylGTu/F1A60QXL2bYC/DwWdMkVQq8Yuv0/kbqIzxd:S+KxY60QU/x+OQq8Yuv0/kOUz

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://freecaps.ml/over/jump/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

  • Lokibot family
    lokibot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b514e1ca810c72dd3a2695b96bd3c3e7_JaffaCakes118
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections