General
-
Target
2026f257fe24b522a9768867c9d4ef832a3a3f5123fdfee64990f86c9e88e862
-
Size
675KB
-
Sample
220420-tbpwxadabk
-
MD5
540a063b60425b3aeef06d7875c0d3b1
-
SHA1
b234c2444660dfcf8421ef2e3f6a29de28564038
-
SHA256
2026f257fe24b522a9768867c9d4ef832a3a3f5123fdfee64990f86c9e88e862
-
SHA512
342f7ad97507920dec3fe383a6b269c4071ebaf79f80711dd176476edf1b80a0c4130370760cf25e1f3bfe1b4c1d5d5da66423a0aff7470716792cd87e777943
Static task
static1
Behavioral task
behavioral1
Sample
2026f257fe24b522a9768867c9d4ef832a3a3f5123fdfee64990f86c9e88e862.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
2026f257fe24b522a9768867c9d4ef832a3a3f5123fdfee64990f86c9e88e862.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
lokibot
http://198.23.200.241/~power13/.sixnrpq/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
2026f257fe24b522a9768867c9d4ef832a3a3f5123fdfee64990f86c9e88e862
-
Size
675KB
-
MD5
540a063b60425b3aeef06d7875c0d3b1
-
SHA1
b234c2444660dfcf8421ef2e3f6a29de28564038
-
SHA256
2026f257fe24b522a9768867c9d4ef832a3a3f5123fdfee64990f86c9e88e862
-
SHA512
342f7ad97507920dec3fe383a6b269c4071ebaf79f80711dd176476edf1b80a0c4130370760cf25e1f3bfe1b4c1d5d5da66423a0aff7470716792cd87e777943
Score10/10-
Accesses Microsoft Outlook profiles
-
Drops file in System32 directory
-