General
- Target flokibot_0.0.0.14.vir
- Size 356KB
- Sample200719-aesnrc966j
- SHA256 5668f2f784befed20b52f3d30aa3a9ab374b35a1a853d908ff9ac5c82ddea749
- MD5 992e9518d69039c3ebae4191e1f8b8b6
- SHA1 3c93cd0ef4c38e4055b88c22bb398dd45a66fb4f
- SHA512 583a8ce05eca97576a38918be2beede7253b2ebf40afcf762e7c6d0fe5a2e6f5b54726f1bf8d594bed8ac30a06d6c9a5c031092246d7078f3db589b90bf55851
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
flokibot_0.0.0.14.vir.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
flokibot_0.0.0.14.vir.exe
Resource
win10v200430
0 signatures
0 seconds
Malware Config
Targets
-
- Target flokibot_0.0.0.14.vir
- Size 356KB
- SHA256 5668f2f784befed20b52f3d30aa3a9ab374b35a1a853d908ff9ac5c82ddea749
- MD5 992e9518d69039c3ebae4191e1f8b8b6
- SHA1 3c93cd0ef4c38e4055b88c22bb398dd45a66fb4f
- SHA512 583a8ce05eca97576a38918be2beede7253b2ebf40afcf762e7c6d0fe5a2e6f5b54726f1bf8d594bed8ac30a06d6c9a5c031092246d7078f3db589b90bf55851
- MD5 SHA1 SHA512
Score8/10-
Deletes itself
-
Drops startup file
-
Suspicious use of SetThreadContext