General
-
Target
a8f6d5c53f1ce4b3841a24cff74e977bd18ee5d4a7566252f9aed42b4fd01b4d.exe
-
Size
409KB
-
Sample
201126-6k3lxlae6j
-
MD5
debfa055a90196038610bd958ed25233
-
SHA1
a12f4fecfc5a78565156099708b39f975658615e
-
SHA256
a8f6d5c53f1ce4b3841a24cff74e977bd18ee5d4a7566252f9aed42b4fd01b4d
-
SHA512
da46db4cf8b000126d5b8660ae66b0c69809cc4fe50e87b1bfc41246e3a296c9a30bb34d7b06a096ab5908548df8a0c0ae812ce12ec235ae986ad9fcb805420c
Static task
static1
Behavioral task
behavioral1
Sample
a8f6d5c53f1ce4b3841a24cff74e977bd18ee5d4a7566252f9aed42b4fd01b4d.exe
Resource
win7v20201028
Malware Config
Extracted
lokibot
http://thunlen.com/chief/alhaji/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
a8f6d5c53f1ce4b3841a24cff74e977bd18ee5d4a7566252f9aed42b4fd01b4d.exe
-
Size
409KB
-
MD5
debfa055a90196038610bd958ed25233
-
SHA1
a12f4fecfc5a78565156099708b39f975658615e
-
SHA256
a8f6d5c53f1ce4b3841a24cff74e977bd18ee5d4a7566252f9aed42b4fd01b4d
-
SHA512
da46db4cf8b000126d5b8660ae66b0c69809cc4fe50e87b1bfc41246e3a296c9a30bb34d7b06a096ab5908548df8a0c0ae812ce12ec235ae986ad9fcb805420c
-
Suspicious use of SetThreadContext
-