Overview

overview

10

Static

static

10

d02bbcafac...18.exe

windows7-x64

10

d02bbcafac...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d02bbcafacaa47e47160ad945fadd830_JaffaCakes118

  • Size

    104KB

  • MD5

    d02bbcafacaa47e47160ad945fadd830

  • SHA1

    65b4098f104c8d2ff0ca6c429f68891e7bce06a9

  • SHA256

    f330a0bbd159a1ea97b058863b0584166acb725e83df47b13e359777d26c3c59

  • SHA512

    d94d815a9c14e0907095c07376401049802297cd0a9ac643003583b5bf2ddd354927b87f73842f5b95ac1010fefc56c674768e70dfa488e95a3f2b3bb84b71b6

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://emet-lmpex.com/Panel/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

  • Lokibot family
    lokibot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d02bbcafacaa47e47160ad945fadd830_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    0239fd611af3d0e9b0c46c5837c80e09


    Headers

    Imports

    Sections