General
-
Target
MV SUNICSTARVSL0234100.exe
-
Size
614KB
-
Sample
230118-j548ksch69
-
MD5
7882e3b7067f6a3697d909e6c497ddf1
-
SHA1
96e6d081c33d080f98d23f1f9253e5cc8b03c0c2
-
SHA256
c385c23b938ed45a8f5df078799725e38973684a1762c346ae1a92fc2bcad2f6
-
SHA512
518f3f14add38ddb8200161152f4c599c41abd1d0cefa3a4b5b875edd1f98ebb08c6439c30fda0014150b1258fda404adb79f8f641228a60013e69a54c6e949f
-
SSDEEP
12288:L54Ynu0b+NoexY/KpYEulnduzfFONTD8Tlj/:KY3+NNx8KpY9lndkEB8Tlj
Static task
static1
Behavioral task
behavioral1
Sample
MV SUNICSTARVSL0234100.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
MV SUNICSTARVSL0234100.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
lokibot
http://171.22.30.164/prime1/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
MV SUNICSTARVSL0234100.exe
-
Size
614KB
-
MD5
7882e3b7067f6a3697d909e6c497ddf1
-
SHA1
96e6d081c33d080f98d23f1f9253e5cc8b03c0c2
-
SHA256
c385c23b938ed45a8f5df078799725e38973684a1762c346ae1a92fc2bcad2f6
-
SHA512
518f3f14add38ddb8200161152f4c599c41abd1d0cefa3a4b5b875edd1f98ebb08c6439c30fda0014150b1258fda404adb79f8f641228a60013e69a54c6e949f
-
SSDEEP
12288:L54Ynu0b+NoexY/KpYEulnduzfFONTD8Tlj/:KY3+NNx8KpY9lndkEB8Tlj
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-