General
-
Target
3HPbPt1C3AHy1z1.exe
-
Size
737KB
-
Sample
210114-l99ffng78n
-
MD5
2326bda19645c06e4f99aeb8b740cbc1
-
SHA1
592467238289914c031935cf2c418dc38a14b818
-
SHA256
0006f7b92348baf0f9da231dc6553defe4e9ce190eff4f1617b81cc3fabbce86
-
SHA512
131bb52086e0e7f5e571ecc3ba7f2edeca2dae9dd5f987762a61152fef70922063e06b75a88bd268e7e53a8ce9a6d195f9e99deb49f3f00e9e2bb2fba9701980
Static task
static1
Behavioral task
behavioral1
Sample
3HPbPt1C3AHy1z1.exe
Resource
win7v20201028
Malware Config
Extracted
lokibot
http://paciflxinc.com/zoro/zoro1/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
3HPbPt1C3AHy1z1.exe
-
Size
737KB
-
MD5
2326bda19645c06e4f99aeb8b740cbc1
-
SHA1
592467238289914c031935cf2c418dc38a14b818
-
SHA256
0006f7b92348baf0f9da231dc6553defe4e9ce190eff4f1617b81cc3fabbce86
-
SHA512
131bb52086e0e7f5e571ecc3ba7f2edeca2dae9dd5f987762a61152fef70922063e06b75a88bd268e7e53a8ce9a6d195f9e99deb49f3f00e9e2bb2fba9701980
-
Suspicious use of SetThreadContext
-