General
- Target scannedfiles-23.exe
- Size 688KB
- Sample210623-aqvjf9917e
- SHA256 b445a79380a50d3f1447597a287e3dda84286ee66d76d0fbda22a04edba1d16e
- MD5 4f261af0216ef7306e2ff076a2462358
- SHA1 8c07c49d5abb7474eab731a8f3111a7dd62e7cb1
- SHA512 98c8471066343ac78063d97be0b23a84486ef2f963e8f3f96b3273e7b05b6fe14c4cf9f5e1d0f2d1a2811099bc9cbe7f4a284ef4c8f1619e2b61808ba8704393
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
scannedfiles-23.exe
Resource
win7v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
lokibot
C2
-
http://63.141.228.141/32.php/hVjgJl5jKemRQ
-
http://kbfvzoboss.bid/alien/fre.php
-
http://alphastand.trade/alien/fre.php
-
http://alphastand.win/alien/fre.php
-
http://alphastand.top/alien/fre.php
Targets
-
- Target scannedfiles-23.exe
- Size 688KB
- SHA256 b445a79380a50d3f1447597a287e3dda84286ee66d76d0fbda22a04edba1d16e
- MD5 4f261af0216ef7306e2ff076a2462358
- SHA1 8c07c49d5abb7474eab731a8f3111a7dd62e7cb1
- SHA512 98c8471066343ac78063d97be0b23a84486ef2f963e8f3f96b3273e7b05b6fe14c4cf9f5e1d0f2d1a2811099bc9cbe7f4a284ef4c8f1619e2b61808ba8704393
- MD5 SHA1 SHA512
-
Suspicious use of SetThreadContext