General
-
Target
JaffaCakes118_4f717226b23060f10c337cb7f124d35c06100ff1f096718e366db5bf01188387
-
Size
652KB
-
MD5
7da3fdc3cd77e5c4b24b0761d6361db8
-
SHA1
f2d37189d92b86e53cda6b5ae40ccd2ba103cb35
-
SHA256
4f717226b23060f10c337cb7f124d35c06100ff1f096718e366db5bf01188387
-
SHA512
65adba50b3fe578ca2fbba1ea1b272a26dae12be2b150c7b675609568aa4a63171b3bd61d4e02faab54f662b3548ddb6d4f091c8ac41ecb2178b8077d9e6944c
-
SSDEEP
1536:kzvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmdf:/SHIG6mQwGmfOQd8YhY0/EqUGf
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
https://goodservices.co.vu/damiano/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_4f717226b23060f10c337cb7f124d35c06100ff1f096718e366db5bf01188387
Headers
Sections