General
- Target 0695e4d3dafa007fe1f23eb50d14f202
- Size 277KB
- Sample220124-pgmaraefhm
- SHA256 b6e8013ddf10f21517ed41bf21b57f37f82872adc052bf94ee2592d24fdb98af
- MD5 0695e4d3dafa007fe1f23eb50d14f202
- SHA1 b6eecf1fd15636ee082d1ce5d4a4857a66832916
- SHA512 45892ddce1f53e13fd8b1dce35a096177427cc55e04da3bbb792a520a06fd735930ee6dc3e9d10097cb82a3ac43eba07df93376ee7ce9649650bb9cb431e2bd1
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
0695e4d3dafa007fe1f23eb50d14f202.exe
Resource
win7-en-20211208
0 signatures
0 seconds
Malware Config
Extracted
Family
-
lokibot
C2
-
http://secure01-redirect.net/gc14/fre.php
-
http://kbfvzoboss.bid/alien/fre.php
-
http://alphastand.trade/alien/fre.php
-
http://alphastand.win/alien/fre.php
-
http://alphastand.top/alien/fre.php
Targets
-
- Target 0695e4d3dafa007fe1f23eb50d14f202
- Size 277KB
- SHA256 b6e8013ddf10f21517ed41bf21b57f37f82872adc052bf94ee2592d24fdb98af
- MD5 0695e4d3dafa007fe1f23eb50d14f202
- SHA1 b6eecf1fd15636ee082d1ce5d4a4857a66832916
- SHA512 45892ddce1f53e13fd8b1dce35a096177427cc55e04da3bbb792a520a06fd735930ee6dc3e9d10097cb82a3ac43eba07df93376ee7ce9649650bb9cb431e2bd1
- MD5 SHA1 SHA512
-
suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)
suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)
-
Accesses Microsoft Outlook profiles