General
- Target 3ee960d7d595c82b47ce28164afed056.exe
- Size 571KB
- Sample201221-b8m45r6vc6
- SHA256 7596f11c31683cc9137672d261e19b4dd61952bad97545080a1663ab475283b2
- MD5 3ee960d7d595c82b47ce28164afed056
- SHA1 fd750607c392744a3302538c2a0b0fe810d199bb
- SHA512 f5432d376f7390c3a4ead25cd167286fb9b99421354302aff7739b30ab2df825eae16d05de1308268df27b60b01f8150a42707c7b6367a5d051e0ad443a49462
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
3ee960d7d595c82b47ce28164afed056.exe
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
lokibot
C2
-
http://begadi.ga/chud/gate.php
-
http://kbfvzoboss.bid/alien/fre.php
-
http://alphastand.trade/alien/fre.php
-
http://alphastand.win/alien/fre.php
-
http://alphastand.top/alien/fre.php
Targets
-
- Target 3ee960d7d595c82b47ce28164afed056.exe
- Size 571KB
- SHA256 7596f11c31683cc9137672d261e19b4dd61952bad97545080a1663ab475283b2
- MD5 3ee960d7d595c82b47ce28164afed056
- SHA1 fd750607c392744a3302538c2a0b0fe810d199bb
- SHA512 f5432d376f7390c3a4ead25cd167286fb9b99421354302aff7739b30ab2df825eae16d05de1308268df27b60b01f8150a42707c7b6367a5d051e0ad443a49462
- MD5 SHA1 SHA512
Suspicious use of SetThreadContext