General

  • Target

    6914cfc39719a58e5d2757e6413590189f8ccd7e6183f45f794931be7638802d.exe

  • Size

    104KB

  • MD5

    f8ee8e7439e2d2d3b349bef5a1c8d336

  • SHA1

    8ed998b87607879fe459673dfc35fab235caf70f

  • SHA256

    6914cfc39719a58e5d2757e6413590189f8ccd7e6183f45f794931be7638802d

  • SHA512

    4357d8b6734173f1d76369c1f113789a95c1755fc007005d9a135a9b1d7da055d771b48581a0b189b4009c22025b91b61b6116a4176ddb1e46e87d0e5aac5987

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://104.248.205.66/index.php/17008709

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

  • Lokibot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6914cfc39719a58e5d2757e6413590189f8ccd7e6183f45f794931be7638802d.exe
    .exe windows:5 windows x86 arch:x86

    0239fd611af3d0e9b0c46c5837c80e09


    Headers

    Imports

    Sections