General
-
Target
scan_01801021pdf.exe
-
Size
265KB
-
Sample
210118-nvdemk1kgs
-
MD5
290f17a9e8b6647b57eb7c8b3ee85717
-
SHA1
b86cc8d553f432a507ba24ed724218da09b3d6cb
-
SHA256
b8f93d593fb0feaa265c385ab4afb8c8e1bb7908b166cf68b6efb36ed1f7fa4f
-
SHA512
76224f371550b9129f7329af0ea34c182be7819af3779dbf120e8e641796fb90004813cc094369c004bfae7fb5ac02cdc000aed778ba4e7ca4c091d9621e7e43
Static task
static1
Behavioral task
behavioral1
Sample
scan_01801021pdf.exe
Resource
win7v20201028
Malware Config
Extracted
lokibot
http://blueriiver-eu.com/zoro/zoro5/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
scan_01801021pdf.exe
-
Size
265KB
-
MD5
290f17a9e8b6647b57eb7c8b3ee85717
-
SHA1
b86cc8d553f432a507ba24ed724218da09b3d6cb
-
SHA256
b8f93d593fb0feaa265c385ab4afb8c8e1bb7908b166cf68b6efb36ed1f7fa4f
-
SHA512
76224f371550b9129f7329af0ea34c182be7819af3779dbf120e8e641796fb90004813cc094369c004bfae7fb5ac02cdc000aed778ba4e7ca4c091d9621e7e43
-
Suspicious use of SetThreadContext
-