General
-
Target
b84ae2b8de6d749cf1bc1f4996aedf619e4f2c2aa4ab3c2b6dc7584d0a3f6907.exe
-
Size
648KB
-
MD5
2bc2b57708a1c1f0c313703b50d5682b
-
SHA1
e7021526abc77d0166ef82a7996fcf7e8060fc00
-
SHA256
b84ae2b8de6d749cf1bc1f4996aedf619e4f2c2aa4ab3c2b6dc7584d0a3f6907
-
SHA512
6c6d5789b0bca8d8c285fc5de985fd9938adcb32a6232d168784d65820267d58434b6271c303c14c7f731b41ab3680b81d9c55f9637930c882a2316cd2618462
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq8IzmdzC:nSHIG6mQwGmfOQd8YhY0/EdUG+
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://ekens.top/RT/as/Mo1.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b84ae2b8de6d749cf1bc1f4996aedf619e4f2c2aa4ab3c2b6dc7584d0a3f6907.exe
Headers
Sections