General
- Target f4bb1b03c911edf744ae82128823f431.exe
- Size 915KB
- Sample210316-d77n77lvrn
- SHA256 dbb8366c63e0e6b39b91616cdce49a552fb133368ae54fb22d08b3834770ee6a
- MD5 f4bb1b03c911edf744ae82128823f431
- SHA1 e8bb37913571c006879b3780061787e965df4955
- SHA512 38788a0fa91addf719e1664cdd0c597190b977831c8d72845489d909a6f1250acb6ac69eaf2d6f1590cf3c669bf58468e0fd6da8a36ba9c1cf87c63794662caf
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
f4bb1b03c911edf744ae82128823f431.exe
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
lokibot
C2
-
http://becharnise.ir/fb7/fre.php
-
http://kbfvzoboss.bid/alien/fre.php
-
http://alphastand.trade/alien/fre.php
-
http://alphastand.win/alien/fre.php
-
http://alphastand.top/alien/fre.php
Targets
-
- Target f4bb1b03c911edf744ae82128823f431.exe
- Size 915KB
- SHA256 dbb8366c63e0e6b39b91616cdce49a552fb133368ae54fb22d08b3834770ee6a
- MD5 f4bb1b03c911edf744ae82128823f431
- SHA1 e8bb37913571c006879b3780061787e965df4955
- SHA512 38788a0fa91addf719e1664cdd0c597190b977831c8d72845489d909a6f1250acb6ac69eaf2d6f1590cf3c669bf58468e0fd6da8a36ba9c1cf87c63794662caf
- MD5 SHA1 SHA512
-
Suspicious use of SetThreadContext