Overview

overview

10

Static

static

10

6a79ced778...0e.exe

windows7-x64

1

6a79ced778...0e.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a79ced77846f964e877d404cb8a5c829ca6bac0b28bd161afd329685064c10e.exe

  • Size

    41KB

  • MD5

    3c5d5cd7b5e48090591184ef497a98b0

  • SHA1

    f9a9771d1e0c12735dc037725fe07e56a75ee86a

  • SHA256

    6a79ced77846f964e877d404cb8a5c829ca6bac0b28bd161afd329685064c10e

  • SHA512

    8b404ab73c039db36fc323295455366ea5373811324fae4cdc266d9b47f5336c1bcaf1be9aa36a3a561fe297a2f778f5a3c34a2659b19a0cfb915d58e4825a22

  • SSDEEP

    768:6TOI/K4hMkjIHltfWsJNvWb4WFdXh9gtHVgEAB9Fb5Sfzt4SfdQMYLe3hfKXe:6N/KzCIHpJNvWbDXh9hd9F+40dQXe3hz

Score
10/10
loaderkoiloader

Malware Config

Extracted

Family

koiloader

C2

http://94.247.42.253/pilot.php

Attributes
  • payload_url

    https://casettalecese.it/wp-content/uploads/2022/10

Signatures

  • Detects KoiLoader payload 1 IoCs
    loader
  • Koiloader family
    koiloader
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6a79ced77846f964e877d404cb8a5c829ca6bac0b28bd161afd329685064c10e.exe
    .exe windows:6 windows x86 arch:x86

    2268c03c1dd3ecd71f7dd192e3e3ce63


    Headers

    Imports

    Sections