General
-
Target
46cac10794aff7321029480097b5a7b55d1c73b29b2d9ce6cde0f5e216bbe2c2
-
Size
1013KB
-
Sample
220707-jj652sfccj
-
MD5
b9929b769d9c7014aeef2cd5538c58f4
-
SHA1
ae57c2e9e5f215c9cb2247ccecceae9cdcc1510c
-
SHA256
46cac10794aff7321029480097b5a7b55d1c73b29b2d9ce6cde0f5e216bbe2c2
-
SHA512
5ce61c69cf3a7d3f9cd27af273dcdd43214946e86725e90818f9793b87d29046f4f87d37a933d6404390eecd7bfafd6958ebb8a489a874a083e0bce42975447e
Static task
static1
Behavioral task
behavioral1
Sample
46cac10794aff7321029480097b5a7b55d1c73b29b2d9ce6cde0f5e216bbe2c2.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
46cac10794aff7321029480097b5a7b55d1c73b29b2d9ce6cde0f5e216bbe2c2.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
lokibot
http://104.233.101.103/arab/Panel/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
46cac10794aff7321029480097b5a7b55d1c73b29b2d9ce6cde0f5e216bbe2c2
-
Size
1013KB
-
MD5
b9929b769d9c7014aeef2cd5538c58f4
-
SHA1
ae57c2e9e5f215c9cb2247ccecceae9cdcc1510c
-
SHA256
46cac10794aff7321029480097b5a7b55d1c73b29b2d9ce6cde0f5e216bbe2c2
-
SHA512
5ce61c69cf3a7d3f9cd27af273dcdd43214946e86725e90818f9793b87d29046f4f87d37a933d6404390eecd7bfafd6958ebb8a489a874a083e0bce42975447e
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-