General
- Target gunzipped
- Size 776KB
- Sample201105-b7msmf483s
- SHA256 9920c491ba7ee51f28d716713aba4d1fe05be42f0f36fe3c2b14d5612dfbf5ba
- MD5 d1f3aaeed43d676edefbd3e8e13006b4
- SHA1 c5c2a7dea62e3de0263a2a6277e45acd61fe390c
- SHA512 03d7a1bd5564e8b583ea21b0d5cd691eb0ffc45393924bc47a634b3d03b0f3b8cfc7db9e3ebcf37ac0a3bdeda85187bbaea59ebbe318f2ebfd1736377b8bdb6b
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
gunzipped.exe
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
lokibot
C2
-
http://venitronics.com/oo/Panel/fre.php
-
http://kbfvzoboss.bid/alien/fre.php
-
http://alphastand.trade/alien/fre.php
-
http://alphastand.win/alien/fre.php
-
http://alphastand.top/alien/fre.php
Targets
-
- Target gunzipped
- Size 776KB
- SHA256 9920c491ba7ee51f28d716713aba4d1fe05be42f0f36fe3c2b14d5612dfbf5ba
- MD5 d1f3aaeed43d676edefbd3e8e13006b4
- SHA1 c5c2a7dea62e3de0263a2a6277e45acd61fe390c
- SHA512 03d7a1bd5564e8b583ea21b0d5cd691eb0ffc45393924bc47a634b3d03b0f3b8cfc7db9e3ebcf37ac0a3bdeda85187bbaea59ebbe318f2ebfd1736377b8bdb6b
- MD5 SHA1 SHA512
-
Suspicious use of SetThreadContext