General
- Target f86fb3a5105e629551b47e9875791b3a.exe
- Size 296KB
- Sample210513-p9dwsdpg9e
- SHA256 98e5506923c5be78a8a1789c8b29b810e99754fdd8e47c5a0e729fec9aaf744c
- MD5 f86fb3a5105e629551b47e9875791b3a
- SHA1 a2ecdd630424395fb03d759aac8237fdc2ff1526
- SHA512 2794276f94e98292f170db35a2c5e919d9856167b9d9be83958bb60d2dc4bc8af623f575a3196580c7e5c42014a22720d8eb86fa59e18c2701ec83417b2e1b8a
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
f86fb3a5105e629551b47e9875791b3a.exe
Resource
win7v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
lokibot
C2
-
http://baller4.gq/polar/fre.php
-
http://kbfvzoboss.bid/alien/fre.php
-
http://alphastand.trade/alien/fre.php
-
http://alphastand.win/alien/fre.php
-
http://alphastand.top/alien/fre.php
-
http://�������ј�Џ����Й��я��
Targets
-
- Target f86fb3a5105e629551b47e9875791b3a.exe
- Size 296KB
- SHA256 98e5506923c5be78a8a1789c8b29b810e99754fdd8e47c5a0e729fec9aaf744c
- MD5 f86fb3a5105e629551b47e9875791b3a
- SHA1 a2ecdd630424395fb03d759aac8237fdc2ff1526
- SHA512 2794276f94e98292f170db35a2c5e919d9856167b9d9be83958bb60d2dc4bc8af623f575a3196580c7e5c42014a22720d8eb86fa59e18c2701ec83417b2e1b8a
- MD5 SHA1 SHA512
-
Suspicious use of SetThreadContext