General
-
Target
4ef9adb2b9fbe473117fa466136ff3dffab003776d69443d89790efe93dc5e3e
-
Size
648KB
-
MD5
416dfd025610df42d8fc5d6c1c25cba6
-
SHA1
82ae1cb1e62c60e5dc4f7adc3a37bc23a864783a
-
SHA256
4ef9adb2b9fbe473117fa466136ff3dffab003776d69443d89790efe93dc5e3e
-
SHA512
d12558b684c8853d9d488f338f191217886fa270e24dfeec39390ab807d8efdd66cdc1fdd66cf5bad53baa61cf777b7288860bee0a61c7d4ee0841c4170d1e30
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqeXIzmd:nSHIG6mQwGmfOQd8YhY0/EnUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://104.248.205.66/index.php/wp?s=831
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4ef9adb2b9fbe473117fa466136ff3dffab003776d69443d89790efe93dc5e3e
Headers
Sections