General
-
Target
45d30030e239b7243f97c05ed52dc4ad9fa3341dbf9c81044742867547abf3e2
-
Size
775KB
-
Sample
220707-msc54sfeh7
-
MD5
7f75700a46751dc62786afbd73e8ca31
-
SHA1
7773fe6984907d111bc879ef93786a39d869d42b
-
SHA256
45d30030e239b7243f97c05ed52dc4ad9fa3341dbf9c81044742867547abf3e2
-
SHA512
65593bb1fec40c76d9fd0e578dbce9108cd6f0f92dce027b3647292fe3917b488c8a2e89ac29126c11e020a72058739977eeab7e67b8f503565670db051af159
Static task
static1
Behavioral task
behavioral1
Sample
45d30030e239b7243f97c05ed52dc4ad9fa3341dbf9c81044742867547abf3e2.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
45d30030e239b7243f97c05ed52dc4ad9fa3341dbf9c81044742867547abf3e2.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
lokibot
http://107.175.150.73/~giftioz/.hoki/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
45d30030e239b7243f97c05ed52dc4ad9fa3341dbf9c81044742867547abf3e2
-
Size
775KB
-
MD5
7f75700a46751dc62786afbd73e8ca31
-
SHA1
7773fe6984907d111bc879ef93786a39d869d42b
-
SHA256
45d30030e239b7243f97c05ed52dc4ad9fa3341dbf9c81044742867547abf3e2
-
SHA512
65593bb1fec40c76d9fd0e578dbce9108cd6f0f92dce027b3647292fe3917b488c8a2e89ac29126c11e020a72058739977eeab7e67b8f503565670db051af159
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-