Overview

overview

10

Static

static

3

epitheliog...Fr.exe

windows7-x64

10

epitheliog...Fr.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    epitheliogeneticTFr.exe

  • Size

    181KB

  • Sample

    240621-zg2esavglk

  • MD5

    7ca21eefff568606fed91321aaa31ba2

  • SHA1

    faa744b10ef6799cce234dcc79474588f9f44bc9

  • SHA256

    950eee474cf4cb3b59178b348cfd618460dc7a895b6a024aa7b3c07845b5c6ab

  • SHA512

    24533c0e1cbc9459b269281b074bd26a35edc07662bd6c9dba9606109e39f91c23808eafd5ca2f7c7adf23983e453d3049eba7b669d3ad16106d9fa73c26d538

  • SSDEEP

    3072:HCmlA+2TGMF85+bkRG32foUP9GmPe97UoArrrW9+pCG7mWo3/F6VeNZ:imlV4h8JG3QUzArrrK2YtOeNZ

Score
10/10
koiloaderloader

Malware Config

Extracted

Family

koiloader

C2

http://195.54.160.202/gowan.php

Attributes
  • payload_url

    https://www.luciaricciardi.com/wp-content/uploads/2018/12

Targets

    • Target

      epitheliogeneticTFr.exe

    • Size

      181KB

    • MD5

      7ca21eefff568606fed91321aaa31ba2

    • SHA1

      faa744b10ef6799cce234dcc79474588f9f44bc9

    • SHA256

      950eee474cf4cb3b59178b348cfd618460dc7a895b6a024aa7b3c07845b5c6ab

    • SHA512

      24533c0e1cbc9459b269281b074bd26a35edc07662bd6c9dba9606109e39f91c23808eafd5ca2f7c7adf23983e453d3049eba7b669d3ad16106d9fa73c26d538

    • SSDEEP

      3072:HCmlA+2TGMF85+bkRG32foUP9GmPe97UoArrrW9+pCG7mWo3/F6VeNZ:imlV4h8JG3QUzArrrK2YtOeNZ

    Score
    10/10
    koiloaderloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks