General
- Target OPEN_2021-04-09_10-21.exe
- Size 285KB
- Sample210409-d5vsz8gxej
- SHA256 b9850fb251862929fb23f494fc125ee143db76a09ac62d5d6ff80f83b417dd58
- MD5 efe97add3ac3ebe440245fba62998db6
- SHA1 6983972b8e46b4fa51d48876dbd8e50ca58fdaf9
- SHA512 ede328db24df3caf9c831311822d518ef4c4e4140183359afb6fc773ce8978967f794e7bd4660b194083508536abf71ffb367903cec93f21edc2c627fc709060
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
OPEN_2021-04-09_10-21.exe
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
lokibot
C2
-
http://31.210.20.58/vncsoa/fre.php
-
http://kbfvzoboss.bid/alien/fre.php
-
http://alphastand.trade/alien/fre.php
-
http://alphastand.win/alien/fre.php
-
http://alphastand.top/alien/fre.php
Targets
-
- Target OPEN_2021-04-09_10-21.exe
- Size 285KB
- SHA256 b9850fb251862929fb23f494fc125ee143db76a09ac62d5d6ff80f83b417dd58
- MD5 efe97add3ac3ebe440245fba62998db6
- SHA1 6983972b8e46b4fa51d48876dbd8e50ca58fdaf9
- SHA512 ede328db24df3caf9c831311822d518ef4c4e4140183359afb6fc773ce8978967f794e7bd4660b194083508536abf71ffb367903cec93f21edc2c627fc709060
- MD5 SHA1 SHA512