General
-
Target
692704ea1178102b991d87a95bd169434ee68c687863e012351ffed523e075b5.exe
-
Size
688KB
-
Sample
220521-yhwp9agbdk
-
MD5
8efba429fa1695077b1cb28fe4edf25c
-
SHA1
883c2010435d1b26a794845546789aa430c27411
-
SHA256
692704ea1178102b991d87a95bd169434ee68c687863e012351ffed523e075b5
-
SHA512
2df5be2f8a18c3315a274d556634ee08a2fe06e9867a414136aff57be4efd39e9005a849cfcae581e61a1941358439474ba979c99dcae764cfd59854240b42ad
Static task
static1
Behavioral task
behavioral1
Sample
692704ea1178102b991d87a95bd169434ee68c687863e012351ffed523e075b5.exe
Resource
win7-20220414-en
Malware Config
Extracted
lokibot
http://sempersim.su/gg12/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
692704ea1178102b991d87a95bd169434ee68c687863e012351ffed523e075b5.exe
-
Size
688KB
-
MD5
8efba429fa1695077b1cb28fe4edf25c
-
SHA1
883c2010435d1b26a794845546789aa430c27411
-
SHA256
692704ea1178102b991d87a95bd169434ee68c687863e012351ffed523e075b5
-
SHA512
2df5be2f8a18c3315a274d556634ee08a2fe06e9867a414136aff57be4efd39e9005a849cfcae581e61a1941358439474ba979c99dcae764cfd59854240b42ad
-
suricata: ET MALWARE LokiBot Application/Credential Data Exfiltration Detected M1
suricata: ET MALWARE LokiBot Application/Credential Data Exfiltration Detected M1
-
suricata: ET MALWARE LokiBot Application/Credential Data Exfiltration Detected M2
suricata: ET MALWARE LokiBot Application/Credential Data Exfiltration Detected M2
-
suricata: ET MALWARE LokiBot Fake 404 Response
suricata: ET MALWARE LokiBot Fake 404 Response
-
suricata: ET MALWARE LokiBot Request for C2 Commands Detected M1
suricata: ET MALWARE LokiBot Request for C2 Commands Detected M1
-
suricata: ET MALWARE LokiBot Request for C2 Commands Detected M2
suricata: ET MALWARE LokiBot Request for C2 Commands Detected M2
-
suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)
suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-