General
- Target b5b027231dfae9dd12f7b3f9abff827e9bbb3251.rl
- Size 229KB
- Sample260411-xevhcaez3k
- SHA256 5654f7b9eec9b44c53928d78deb3991bb94d95f98e95801f66c133570e21a89f
- MD5 87e838a52d97c431a4bff79c2a8c9a28
- SHA1 b5b027231dfae9dd12f7b3f9abff827e9bbb3251
- SHA512 72bc9b844f1dc984a81ce802c182e3832292dde6c73395ac85596ada0e0d960bb138b2e488195d355df7b74d70e300842c4784cf49bfc72d7a595563dce63568
- SSDEEP 3072:rFbpLvBOkWpEmDWgp4Hln4CO1j+ozSva9Donzpi/7:rbB2EAfzSXn9i/7
- TLSH T1EB347D0775C4ECB5E66261F604B9D4BE0AFDFAF81B81D99B13144B5F2E500C0AB319EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b5b027231dfae9dd12f7b3f9abff827e9bbb3251.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
koiloader
C2
-
http://89.251.22.227/guacos.php
Attributes
-
payload_url
https://lechiavetteusb.it/imgs/usb/logo
Targets
-
- Target b5b027231dfae9dd12f7b3f9abff827e9bbb3251.rl
- Size 229KB
- SHA256 5654f7b9eec9b44c53928d78deb3991bb94d95f98e95801f66c133570e21a89f
- MD5 87e838a52d97c431a4bff79c2a8c9a28
- SHA1 b5b027231dfae9dd12f7b3f9abff827e9bbb3251
- SHA512 72bc9b844f1dc984a81ce802c182e3832292dde6c73395ac85596ada0e0d960bb138b2e488195d355df7b74d70e300842c4784cf49bfc72d7a595563dce63568
- SSDEEP 3072:rFbpLvBOkWpEmDWgp4Hln4CO1j+ozSva9Donzpi/7:rbB2EAfzSXn9i/7
- TLSH T1EB347D0775C4ECB5E66261F604B9D4BE0AFDFAF81B81D99B13144B5F2E500C0AB319EA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects KoiLoader payload
-
Koiloader family