General
- Target svFG.exe
- Size 623KB
- Sample230815-hdggrsbc5t
- SHA256 212e4c51115bebfa69d6d30e01d9cbfcf1546419d776cb906f7afd0219c61499
- MD5 b4ede3be28a02d4ad6033d5e8021e2f4
- SHA1 f1ca92cadf1ec74db2599909987f4bb0fad77e4c
- SHA512 8b401d523b65b7af525d98bda9eb94e54d0bd28559cca5544c2fecb203f03f493e0333d8acb3fc398e13064cc92a5fd6ce27a0d787912001fe173244c25d91fd
- SSDEEP 6144:1tT+iT++TksVGd0WF/eQPc/Rexbp+pEW1wzIJb+B7HAHBJkPjUyp1I2Rg0cGqT+:1tBxksId0CeQc/MfaE0wEJwAipNDq
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
svFG.exe
Resource
win7-20230712-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
lokibot
C2
-
http://2.59.254.19/noko/five/fre.php
-
http://kbfvzoboss.bid/alien/fre.php
-
http://alphastand.trade/alien/fre.php
-
http://alphastand.win/alien/fre.php
-
http://alphastand.top/alien/fre.php
Targets
-
- Target svFG.exe
- Size 623KB
- SHA256 212e4c51115bebfa69d6d30e01d9cbfcf1546419d776cb906f7afd0219c61499
- MD5 b4ede3be28a02d4ad6033d5e8021e2f4
- SHA1 f1ca92cadf1ec74db2599909987f4bb0fad77e4c
- SHA512 8b401d523b65b7af525d98bda9eb94e54d0bd28559cca5544c2fecb203f03f493e0333d8acb3fc398e13064cc92a5fd6ce27a0d787912001fe173244c25d91fd
- SSDEEP 6144:1tT+iT++TksVGd0WF/eQPc/Rexbp+pEW1wzIJb+B7HAHBJkPjUyp1I2Rg0cGqT+:1tBxksId0CeQc/MfaE0wEJwAipNDq
- MD5 SHA1 SHA512 SSDEEP
-
Suspicious use of SetThreadContext