General
- Target vbc.exe
- Size 347KB
- Sample210709-gqtc7bk65x
- SHA256 749437c88e2c14c1e8f366cbdc97d1a1eb7ee21ea949d57eef55deb553191aca
- MD5 d85950bc6166358539e77a46202d80d9
- SHA1 82d25f7a7d11de4e95d516772f6e75797936acc6
- SHA512 be0846b1d8363a16682665596f38e3bc798c43391ffe50a9f126235db3e13b4b18586e7761149015d70fa76857807f0530220a4b7830305755c22f9419abbbf0
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
vbc.exe
Resource
win7v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
lokibot
C2
-
http://manvim.co/fd4/fre.php
-
http://kbfvzoboss.bid/alien/fre.php
-
http://alphastand.trade/alien/fre.php
-
http://alphastand.win/alien/fre.php
-
http://alphastand.top/alien/fre.php
Targets
-
- Target vbc.exe
- Size 347KB
- SHA256 749437c88e2c14c1e8f366cbdc97d1a1eb7ee21ea949d57eef55deb553191aca
- MD5 d85950bc6166358539e77a46202d80d9
- SHA1 82d25f7a7d11de4e95d516772f6e75797936acc6
- SHA512 be0846b1d8363a16682665596f38e3bc798c43391ffe50a9f126235db3e13b4b18586e7761149015d70fa76857807f0530220a4b7830305755c22f9419abbbf0
- MD5 SHA1 SHA512
-
Uses the VBS compiler for execution