General
-
Target
907b94712371352eba65c78fb8e4e99c68df75b2c0b9ce8a2a4ad91160df9f5e
-
Size
249KB
-
Sample
210926-2mv63afde2
-
MD5
781c03c9fe5134551a626abceb0a8526
-
SHA1
f61f0a5dddc5627c06ab1836364c917ca71476e6
-
SHA256
907b94712371352eba65c78fb8e4e99c68df75b2c0b9ce8a2a4ad91160df9f5e
-
SHA512
38a5f2ea854a86681211e6d9cf9e3c86c9046b7062b03a9ee013ce560e98890085f34471fcfc49c45b2e4990d17765e000ffa7aad2b17f785e213b93aed36360
Static task
static1
Malware Config
Extracted
lokibot
http://136.243.159.53/~element/page.php?id=488
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
907b94712371352eba65c78fb8e4e99c68df75b2c0b9ce8a2a4ad91160df9f5e
-
Size
249KB
-
MD5
781c03c9fe5134551a626abceb0a8526
-
SHA1
f61f0a5dddc5627c06ab1836364c917ca71476e6
-
SHA256
907b94712371352eba65c78fb8e4e99c68df75b2c0b9ce8a2a4ad91160df9f5e
-
SHA512
38a5f2ea854a86681211e6d9cf9e3c86c9046b7062b03a9ee013ce560e98890085f34471fcfc49c45b2e4990d17765e000ffa7aad2b17f785e213b93aed36360
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-