General
-
Target
97e153c6aa31e8a45026e859cdfcfbcc99e3db0b72da8e9985e4fdb938e42117
-
Size
983KB
-
Sample
220701-gfe62sedgn
-
MD5
3b4c3db423afe45adefae2098e4706fa
-
SHA1
c80ccc175a0ed81300b43036588551610912d6b6
-
SHA256
97e153c6aa31e8a45026e859cdfcfbcc99e3db0b72da8e9985e4fdb938e42117
-
SHA512
013e82c9ce0264eca2797f755d5b8d73be5d16204441a0480dca6193baafc821b9dc3b1898bce8be8e2d248dad10d26991d4b4b43cce1a4f5dd3bf2387c19552
Static task
static1
Behavioral task
behavioral1
Sample
97e153c6aa31e8a45026e859cdfcfbcc99e3db0b72da8e9985e4fdb938e42117.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
97e153c6aa31e8a45026e859cdfcfbcc99e3db0b72da8e9985e4fdb938e42117.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
lokibot
http://klickus.com/okye/Panel/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
97e153c6aa31e8a45026e859cdfcfbcc99e3db0b72da8e9985e4fdb938e42117
-
Size
983KB
-
MD5
3b4c3db423afe45adefae2098e4706fa
-
SHA1
c80ccc175a0ed81300b43036588551610912d6b6
-
SHA256
97e153c6aa31e8a45026e859cdfcfbcc99e3db0b72da8e9985e4fdb938e42117
-
SHA512
013e82c9ce0264eca2797f755d5b8d73be5d16204441a0480dca6193baafc821b9dc3b1898bce8be8e2d248dad10d26991d4b4b43cce1a4f5dd3bf2387c19552
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-