Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

ebed63d822...18.exe

windows7-x64

3

ebed63d822...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ebed63d82235b2c0803a6fc8798eb2cb_JaffaCakes118

  • Size

    4.3MB

  • MD5

    ebed63d82235b2c0803a6fc8798eb2cb

  • SHA1

    906be8d0b63b388e9270e221a35f50346df8ff9d

  • SHA256

    83fca7e46ea7973d4061a6350db64621cbef694f9269a9298238a364e00ef007

  • SHA512

    b8b12380d05520a0b60a3937735b981b506de24c878e428f905a1421eae081f8424352be4cb22b972ab3dafd9f9e49736188b9ba756b2520ce33c3516bc9f770

  • SSDEEP

    98304:O8j/FsN/qL7aWA6m8jwA12Hy/6Vo5CkL7:OI/FG/qvaL6HF/6el7

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://www.hornelink.cn/new/Panel/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

  • Lokibot family
    lokibot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ebed63d82235b2c0803a6fc8798eb2cb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections