General
- Target regasm.exe
- Size 308KB
- Sample201109-jprya1ldks
- SHA256 6a9159d672c380ec9f2d7ecf683147e10176ad5cdebcd9319c65ec4fe91be3f5
- MD5 ec07bb4d6f9fd85c7436251b989dfafb
- SHA1 1adfcc2a957b23e3d1d0d9caab9a50ec2a3757f6
- SHA512 cdc4607c28b322eb90dd8d6509d850c8f53a87301a5eec6f57484e14d6dde1a4b642bb8ee20cd2463f5a7659ee998b980ffd3fef9348db6d57911567e420e561
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
regasm.exe
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
lokibot
C2
-
http://zangs.ga/chang/gate.php
-
http://kbfvzoboss.bid/alien/fre.php
-
http://alphastand.trade/alien/fre.php
-
http://alphastand.win/alien/fre.php
-
http://alphastand.top/alien/fre.php
Targets
-
- Target regasm.exe
- Size 308KB
- SHA256 6a9159d672c380ec9f2d7ecf683147e10176ad5cdebcd9319c65ec4fe91be3f5
- MD5 ec07bb4d6f9fd85c7436251b989dfafb
- SHA1 1adfcc2a957b23e3d1d0d9caab9a50ec2a3757f6
- SHA512 cdc4607c28b322eb90dd8d6509d850c8f53a87301a5eec6f57484e14d6dde1a4b642bb8ee20cd2463f5a7659ee998b980ffd3fef9348db6d57911567e420e561
- MD5 SHA1 SHA512
-
Loads dropped DLL