Malware Signature

The following table shows a list of malware samples and the corresponding botnet C&C (ip:port) associated with Flokibot

Database Entry


Malware:Flokibot
First seen:2016-10-28 09:43:06 UTC
Last seen:2016-11-29 23:56:31 UTC

Malware Samples


The table below documents all malware samples associated with this malware family.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-11-29 23:56:31398cb01626d842378415f1fa19457ef6n/aFlokibot151.248.123.176:443
2016-11-29 23:56:31398cb01626d842378415f1fa19457ef6n/aFlokibot151.248.123.176:443
2016-11-29 22:30:206ae044923c4e62434ecf6fde378e674an/aFlokibot151.248.123.176:443
2016-11-29 22:30:206ae044923c4e62434ecf6fde378e674an/aFlokibot151.248.123.176:443
2016-11-24 06:31:295d817395b4e6a828850e0010edeccc93Virustotal results 39/57 (68.42%) Flokibot91.134.123.102:443
2016-11-24 06:31:295d817395b4e6a828850e0010edeccc93Virustotal results 39/57 (68.42%) Flokibot91.134.123.102:443
2016-11-03 09:51:17a19f8ef1a8eaa98cedfbc0ca6f127301n/aFlokibot151.248.123.176:443
2016-11-03 09:51:17a19f8ef1a8eaa98cedfbc0ca6f127301n/aFlokibot151.248.123.176:443
2016-10-28 09:43:066a1fc5df66139028d387ef9f8f53dde0Virustotal results 32/57 (56.14%) Flokibot151.248.123.176:443
2016-10-28 09:43:066a1fc5df66139028d387ef9f8f53dde0Virustotal results 32/57 (56.14%) Flokibot151.248.123.176:443