General
- Target f1671196b3a4ec295dd26511519ab7ff.exe
- Size 414KB
- Sample201215-tkg4c9vpae
- SHA256 9fadf8664cafdac3e46604b3693a4e116f2f65af92fac2ab2c3fde0742f0de99
- MD5 f1671196b3a4ec295dd26511519ab7ff
- SHA1 0aeb09752eea78a42f5b8222b7b44d3798deec58
- SHA512 07c3f9bdaf4bc052c5d436292ebf24aa52add0fa150133154b5b18acd40a1e7632394adf36b54d3dcb9fdc01590de2dd7ebd9637a9694dd192e2931739c91e9d
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
f1671196b3a4ec295dd26511519ab7ff.exe
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
lokibot
C2
-
http://begadi.ga/clue/gate.php
-
http://kbfvzoboss.bid/alien/fre.php
-
http://alphastand.trade/alien/fre.php
-
http://alphastand.win/alien/fre.php
-
http://alphastand.top/alien/fre.php
Targets
-
- Target f1671196b3a4ec295dd26511519ab7ff.exe
- Size 414KB
- SHA256 9fadf8664cafdac3e46604b3693a4e116f2f65af92fac2ab2c3fde0742f0de99
- MD5 f1671196b3a4ec295dd26511519ab7ff
- SHA1 0aeb09752eea78a42f5b8222b7b44d3798deec58
- SHA512 07c3f9bdaf4bc052c5d436292ebf24aa52add0fa150133154b5b18acd40a1e7632394adf36b54d3dcb9fdc01590de2dd7ebd9637a9694dd192e2931739c91e9d
- MD5 SHA1 SHA512
-
Suspicious use of SetThreadContext