General
-
Target
983510df5d225cfe14e5d5a8a1f5991c8879de5ae0dcdda84f80f7107094e635
-
Size
205KB
-
Sample
220707-v96srafbh7
-
MD5
7522cabf14151d09bdf4a77654f34d7d
-
SHA1
67339934cc8096ea6c4603a3c2a4bf4db0b58069
-
SHA256
983510df5d225cfe14e5d5a8a1f5991c8879de5ae0dcdda84f80f7107094e635
-
SHA512
f2a2452118012594142b8cc684c3a160ace2215e24270f00d7b8a6d60765dc4536745d16dde1ef13350e03e849f8628e5ac624d8eea7c5732eebb901638e7d69
Static task
static1
Malware Config
Extracted
lokibot
http://45.133.1.20/health12/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
983510df5d225cfe14e5d5a8a1f5991c8879de5ae0dcdda84f80f7107094e635
-
Size
205KB
-
MD5
7522cabf14151d09bdf4a77654f34d7d
-
SHA1
67339934cc8096ea6c4603a3c2a4bf4db0b58069
-
SHA256
983510df5d225cfe14e5d5a8a1f5991c8879de5ae0dcdda84f80f7107094e635
-
SHA512
f2a2452118012594142b8cc684c3a160ace2215e24270f00d7b8a6d60765dc4536745d16dde1ef13350e03e849f8628e5ac624d8eea7c5732eebb901638e7d69
-
Suspicious use of SetThreadContext
-