General
-
Target
5ae938385f833412626935ca2eaf4dd3.exe
-
Size
694KB
-
Sample
221103-lmma6abbem
-
MD5
5ae938385f833412626935ca2eaf4dd3
-
SHA1
a5cc23da589f253373292087df974cf4351a543f
-
SHA256
93817bec58278b88fae815045d7b2705dcdc92dd78a776cc9232c3b6ddc97d78
-
SHA512
50855e1cadba96f05a4612ae3d7eb61afa68444dcac14e07ee3ffc8381e91008e8271e9a327cc0170fe58b2b222a2241f245a9cccdfc6234b5a563f3e0fecbe7
-
SSDEEP
12288:tnkejwFGfUzprSK+ofDMkStqv8DZMw+XM:/eGMlrSXdekU
Static task
static1
Behavioral task
behavioral1
Sample
5ae938385f833412626935ca2eaf4dd3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5ae938385f833412626935ca2eaf4dd3.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
lokibot
http://sempersim.su/gl16/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
5ae938385f833412626935ca2eaf4dd3.exe
-
Size
694KB
-
MD5
5ae938385f833412626935ca2eaf4dd3
-
SHA1
a5cc23da589f253373292087df974cf4351a543f
-
SHA256
93817bec58278b88fae815045d7b2705dcdc92dd78a776cc9232c3b6ddc97d78
-
SHA512
50855e1cadba96f05a4612ae3d7eb61afa68444dcac14e07ee3ffc8381e91008e8271e9a327cc0170fe58b2b222a2241f245a9cccdfc6234b5a563f3e0fecbe7
-
SSDEEP
12288:tnkejwFGfUzprSK+ofDMkStqv8DZMw+XM:/eGMlrSXdekU
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-