General
- Target DKOL0010-BA017.exe
- Size 848KB
- Sample210429-6vbvxt3qbn
- SHA256 3a1d1af83f1d6d41b81db7d6b8fa12704cc90a488e0c70aaa2344c49f5c770e5
- MD5 33f8bd05ba1296a4b5d393b0bdcb6507
- SHA1 9cb6cb2cbee74e66c084aab11348864bf0ee9cf1
- SHA512 9c5e39ebd1a78a241cf36c37cdc8a9fa4079dbd269bdecab63c3eef3d486aba35e45891e2e049142abf1cb93c37ea0216963611b227a728c3bc020f87f114cd7
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
DKOL0010-BA017.exe
Resource
win7v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
lokibot
C2
-
http://104.168.175.179/oga/panel/fre.php
-
http://kbfvzoboss.bid/alien/fre.php
-
http://alphastand.trade/alien/fre.php
-
http://alphastand.win/alien/fre.php
-
http://alphastand.top/alien/fre.php
Targets
-
- Target DKOL0010-BA017.exe
- Size 848KB
- SHA256 3a1d1af83f1d6d41b81db7d6b8fa12704cc90a488e0c70aaa2344c49f5c770e5
- MD5 33f8bd05ba1296a4b5d393b0bdcb6507
- SHA1 9cb6cb2cbee74e66c084aab11348864bf0ee9cf1
- SHA512 9c5e39ebd1a78a241cf36c37cdc8a9fa4079dbd269bdecab63c3eef3d486aba35e45891e2e049142abf1cb93c37ea0216963611b227a728c3bc020f87f114cd7
- MD5 SHA1 SHA512
-
Suspicious use of SetThreadContext