Overview

overview

10

Static

static

10

be26d69d11...df.exe

windows7-x64

1

be26d69d11...df.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    be26d69d11362db3df8c6e0a68de119d424f6ea431fe6db842f4355ccc9db6df

  • Size

    648KB

  • MD5

    71ce1743bedace6a21fc0a595f5fc72b

  • SHA1

    b1c7ee4eabb7b58aacf6f3074f1e491aee930df5

  • SHA256

    be26d69d11362db3df8c6e0a68de119d424f6ea431fe6db842f4355ccc9db6df

  • SHA512

    11d4a18ad8d51ccaf37acf8c08a2df5fb4e6632737a7c1bd70f698e477d7007fba5a32c822a7be0799a83b1f708980186465b0d04a77ce5ee22cb39406d35809

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqTIzmd:nSHIG6mQwGmfOQd8YhY0/EGUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://164.90.194.235/?id=17007285853618101

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

  • Lokibot family
    lokibot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • be26d69d11362db3df8c6e0a68de119d424f6ea431fe6db842f4355ccc9db6df
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections