Overview

overview

10

Static

static

10

ea6bd8a856...18.exe

windows7-x64

10

ea6bd8a856...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea6bd8a856fd5939df9b0104117bf8a3_JaffaCakes118

  • Size

    1015KB

  • MD5

    ea6bd8a856fd5939df9b0104117bf8a3

  • SHA1

    3859a5a77b850311d32dedbf5a54b77c889a8748

  • SHA256

    402b48eeeeafa1685df024878c883f2674632dfe511f8238d3dcea35fc06840b

  • SHA512

    b94863f61e7b7419bfc50d6968689c47c22b9092c0c9f936f37d097b5fd4e5af3eb1201fb0234262bf6fbc60f5e6b3d4aa0974d9a5ff23e3430adfd01cbaea4d

  • SSDEEP

    24576:Eg5zF/FSAIjCaGH+xkWlsHLwhO/9YmaDn6rr/qKoSBoAwXKN:ZYfaLRYmaDnoqKoS6fK

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://taolay12.ru/Panel/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

  • Lokibot family
    lokibot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ea6bd8a856fd5939df9b0104117bf8a3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections