General
-
Target
61241845398bef5d08b1419c2bbb50edd4cfa8009407f63bc7fb74181928a490.exe
-
Size
297KB
-
Sample
211116-pbqqzsdga8
-
MD5
06451b346cd5a8c319f2ca34212ee91f
-
SHA1
659ff8f43ca3652c733c0e102941bed542ed9f58
-
SHA256
61241845398bef5d08b1419c2bbb50edd4cfa8009407f63bc7fb74181928a490
-
SHA512
c688c5ff25ab2eeaff0c0fea736711e5660dabec56249683fe481602a04cc470be2cdffdf51ed29d56b245bdb1b86b13f5fc9657b3b64a449c2d267e9f425aac
Static task
static1
Behavioral task
behavioral1
Sample
61241845398bef5d08b1419c2bbb50edd4cfa8009407f63bc7fb74181928a490.exe
Resource
win7-en-20211104
Behavioral task
behavioral2
Sample
61241845398bef5d08b1419c2bbb50edd4cfa8009407f63bc7fb74181928a490.exe
Resource
win10-en-20211104
Malware Config
Extracted
lokibot
http://secure01-redirect.net/gb8/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
61241845398bef5d08b1419c2bbb50edd4cfa8009407f63bc7fb74181928a490.exe
-
Size
297KB
-
MD5
06451b346cd5a8c319f2ca34212ee91f
-
SHA1
659ff8f43ca3652c733c0e102941bed542ed9f58
-
SHA256
61241845398bef5d08b1419c2bbb50edd4cfa8009407f63bc7fb74181928a490
-
SHA512
c688c5ff25ab2eeaff0c0fea736711e5660dabec56249683fe481602a04cc470be2cdffdf51ed29d56b245bdb1b86b13f5fc9657b3b64a449c2d267e9f425aac
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-