General
-
Target
RES.exe
-
Size
431KB
-
Sample
201120-62ytngca1n
-
MD5
f512a910c922bfde0cec0f2cc5e97be5
-
SHA1
ec98f66e4fd1189696e29b74122dfa0aad42946b
-
SHA256
daf0976e7fee1d4b7d49a91d08340b0aec7fe2518b5e31170c3f4cd5194121f9
-
SHA512
0ab51549a618d840c729c5450272f0d031d20d84339b2c9c9ae212347039ecdb39c12bf0a98d9ccc4f339e22262061f6926999b4a2285303fef0b186e409c05d
Static task
static1
Behavioral task
behavioral1
Sample
RES.exe
Resource
win7v20201028
Malware Config
Extracted
lokibot
http://crestmart.ga/main/config/herm/temp.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
RES.exe
-
Size
431KB
-
MD5
f512a910c922bfde0cec0f2cc5e97be5
-
SHA1
ec98f66e4fd1189696e29b74122dfa0aad42946b
-
SHA256
daf0976e7fee1d4b7d49a91d08340b0aec7fe2518b5e31170c3f4cd5194121f9
-
SHA512
0ab51549a618d840c729c5450272f0d031d20d84339b2c9c9ae212347039ecdb39c12bf0a98d9ccc4f339e22262061f6926999b4a2285303fef0b186e409c05d
-
Loads dropped DLL
-