Overview

overview

10

Static

static

10

1996-0-0x0...ry.exe

windows7-x64

1

1996-0-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    1996-0-0x00000000000B0000-0x00000000000BD000-memory.dmp

  • Size

    52KB

  • MD5

    6c64c13567400dfa220098085035b7ba

  • SHA1

    0dfd8865e9678be7af88a1c08c85e6042dd978cd

  • SHA256

    884918101924e2c71fa31e9cd7bd804f07b903934215e691d702b8b577205515

  • SHA512

    f7768f167497f159fcf9597ea8896a134fcff9d5696b5c7061c1890729bec694b862f4a5ff2e6400b82f1679987a0f4fa8ad075b946b0a57c1fd9699f20b4f77

  • SSDEEP

    768:XIke6+MuNZZ82Vb0+wAo0q1KRmRS6+CZh9QuDpWZQdHh+zpu0c5N3cQ8r6RbM:Xy6HuNv82rxq1K0uoh9hW5Nuj7cg

Score
10/10
loaderkoiloader

Malware Config

Extracted

Family

koiloader

C2

http://146.70.158.109/config.php

Attributes
  • payload_url

    https://mayanboats.com/wp-content/uploads

Signatures

  • Detects KoiLoader payload 1 IoCs
    loader
  • Koiloader family
    koiloader
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1996-0-0x00000000000B0000-0x00000000000BD000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections