General
-
Target
3adce4b284295dff6b69a9573a03d604da7174fe625b8952ef3d6145846ffc14
-
Size
1.2MB
-
Sample
220703-w8h6qscbgn
-
MD5
f81c3c7143568ef80f9d5aa9c26fe3d9
-
SHA1
57b0791a8ae2b1e6f8f3f06778efc67c27f67de3
-
SHA256
3adce4b284295dff6b69a9573a03d604da7174fe625b8952ef3d6145846ffc14
-
SHA512
2168eec2d34eaca4887d16103efe57d3869eab8a518f894df211515c686632af701bf6bdc04c282339a460e422723565c3f7799d71e6bbacf73ac70c10d67575
Static task
static1
Behavioral task
behavioral1
Sample
3adce4b284295dff6b69a9573a03d604da7174fe625b8952ef3d6145846ffc14.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3adce4b284295dff6b69a9573a03d604da7174fe625b8952ef3d6145846ffc14.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
lokibot
http://leorentacars.com/me/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
3adce4b284295dff6b69a9573a03d604da7174fe625b8952ef3d6145846ffc14
-
Size
1.2MB
-
MD5
f81c3c7143568ef80f9d5aa9c26fe3d9
-
SHA1
57b0791a8ae2b1e6f8f3f06778efc67c27f67de3
-
SHA256
3adce4b284295dff6b69a9573a03d604da7174fe625b8952ef3d6145846ffc14
-
SHA512
2168eec2d34eaca4887d16103efe57d3869eab8a518f894df211515c686632af701bf6bdc04c282339a460e422723565c3f7799d71e6bbacf73ac70c10d67575
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-