General
-
Target
documentos001DHL.PDF.exe
-
Size
952KB
-
Sample
210623-yl5p58wzy6
-
MD5
ad08c92ae55a9e4012e2cfc6f37cd89f
-
SHA1
7cf08e1b6a8026060a70de0da3bc4f4dedf7daa5
-
SHA256
887f31546a3f8f121475b862fbbb75cea8b515464a09c4f64e9add56792718c3
-
SHA512
b9c87b5acc3dc64170f0a3b41a27237d06077a0acfc652e70f51bee457811c1145aeac9aaba7c1ebe954229798142c57cceba80350a11c6a212ad88fdcc93f9a
Static task
static1
Behavioral task
behavioral1
Sample
documentos001DHL.PDF.exe
Resource
win7v20210410
Malware Config
Extracted
lokibot
http://63.141.228.141/32.php/209hwrrIygNFO
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
documentos001DHL.PDF.exe
-
Size
952KB
-
MD5
ad08c92ae55a9e4012e2cfc6f37cd89f
-
SHA1
7cf08e1b6a8026060a70de0da3bc4f4dedf7daa5
-
SHA256
887f31546a3f8f121475b862fbbb75cea8b515464a09c4f64e9add56792718c3
-
SHA512
b9c87b5acc3dc64170f0a3b41a27237d06077a0acfc652e70f51bee457811c1145aeac9aaba7c1ebe954229798142c57cceba80350a11c6a212ad88fdcc93f9a
-
Suspicious use of SetThreadContext
-