General
-
Target
Inquiry Order.exe
-
Size
824KB
-
Sample
221005-g1f9vadgcj
-
MD5
2330fdee646708298e2339323ddb367b
-
SHA1
1347f5999d92f9fdb2a598d7b9c604d84174c617
-
SHA256
6107d46d911270a0dff4638eb37be034995cf887f633b24a254ce2f642564fbf
-
SHA512
476cddb75cadb570fb0685ac68515ea501afc495afd90dcc0d15719ba9287c2c1f78b965450e00bf5dd4c0c8456571469d98484df9e4239275952c614376c93c
-
SSDEEP
12288:OJrR541elNwZvodPeH2mGiPPIkaXfTwhIrht6kKwemZ:ON41eBhw2mGiPwdoPweU
Static task
static1
Behavioral task
behavioral1
Sample
Inquiry Order.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Inquiry Order.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
lokibot
http://162.0.223.13/?08fequikdahgueq78uc
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
Inquiry Order.exe
-
Size
824KB
-
MD5
2330fdee646708298e2339323ddb367b
-
SHA1
1347f5999d92f9fdb2a598d7b9c604d84174c617
-
SHA256
6107d46d911270a0dff4638eb37be034995cf887f633b24a254ce2f642564fbf
-
SHA512
476cddb75cadb570fb0685ac68515ea501afc495afd90dcc0d15719ba9287c2c1f78b965450e00bf5dd4c0c8456571469d98484df9e4239275952c614376c93c
-
SSDEEP
12288:OJrR541elNwZvodPeH2mGiPPIkaXfTwhIrht6kKwemZ:ON41eBhw2mGiPwdoPweU
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-