General
-
Target
9c39ffe8104468fed8b691d138aebb310f47c43818775cd322dd8da989ca5152
-
Size
648KB
-
Sample
220414-pwpz7acag8
-
MD5
c158c485a8e87e39994b497a3744e228
-
SHA1
13246c70deab15d1302792eb40b75f67bf0ca8b1
-
SHA256
9c39ffe8104468fed8b691d138aebb310f47c43818775cd322dd8da989ca5152
-
SHA512
519a6b61082f09f697de4f4cee2b6bd907a076bd604ed637fa7a8c6ffc601c10a074fb4117468163492464cf44aeeb791efae7bb28d27fb8d3186220e587689d
Static task
static1
Behavioral task
behavioral1
Sample
9c39ffe8104468fed8b691d138aebb310f47c43818775cd322dd8da989ca5152.exe
Resource
win7-20220331-en
Behavioral task
behavioral2
Sample
9c39ffe8104468fed8b691d138aebb310f47c43818775cd322dd8da989ca5152.exe
Resource
win10v2004-20220331-en
Malware Config
Extracted
lokibot
http://quehenbergar.com/coast/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
9c39ffe8104468fed8b691d138aebb310f47c43818775cd322dd8da989ca5152
-
Size
648KB
-
MD5
c158c485a8e87e39994b497a3744e228
-
SHA1
13246c70deab15d1302792eb40b75f67bf0ca8b1
-
SHA256
9c39ffe8104468fed8b691d138aebb310f47c43818775cd322dd8da989ca5152
-
SHA512
519a6b61082f09f697de4f4cee2b6bd907a076bd604ed637fa7a8c6ffc601c10a074fb4117468163492464cf44aeeb791efae7bb28d27fb8d3186220e587689d
Score10/10-
Meta Stealer Stealer
Meta Stealer steals passwords stored in browsers, written in C++.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-