Overview

overview

10

Static

static

10

f88e97bdda...18.exe

windows7-x64

f88e97bdda...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f88e97bdda69f4f911f82715628160e0_JaffaCakes118

  • Size

    104KB

  • MD5

    f88e97bdda69f4f911f82715628160e0

  • SHA1

    ef98005c7fb1ed4ef2b7ff01a7e4b0fd66d14f0d

  • SHA256

    25382ddff62305a5200d5b5d7a43caa374ad8e67d4b3e7575639d17010dd6533

  • SHA512

    3f0bc2cb4205e6c8ee1a1c39f084566a9a54f28603a554b4fda2163a8de920fbcfc4263a1f0d06af133975bb5147f6b0a3c95b56d8e952de5b469b6a7a2e2ae2

  • SSDEEP

    1536:OzvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:dSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://51.68.167.104/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

  • Lokibot family
    lokibot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f88e97bdda69f4f911f82715628160e0_JaffaCakes118
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections