General
-
Target
c108939610bf760ad9a71cd9c45259f2.exe
-
Size
104KB
-
Sample
230124-bts26sgc77
-
MD5
c108939610bf760ad9a71cd9c45259f2
-
SHA1
591cf5942dfaa94f75932fed1fd043fb95d2b045
-
SHA256
5d99ab24811624ef3c5f5d8c9b71009ebe33acfbb235cb58400c2a4b6e0c30bf
-
SHA512
233d58e9a837b5d86ac0f3c4110a41b04c9de97cc6f10150311a725724bb1a913dda74fc043561bd493635bc925b364a9ae794b8fc16fd6d380d16a339849e39
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq1Izmd:nSHIG6mQwGmfOQd8YhY0/EQUG
Behavioral task
behavioral1
Sample
c108939610bf760ad9a71cd9c45259f2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c108939610bf760ad9a71cd9c45259f2.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
lokibot
http://208.67.105.148/china/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
c108939610bf760ad9a71cd9c45259f2.exe
-
Size
104KB
-
MD5
c108939610bf760ad9a71cd9c45259f2
-
SHA1
591cf5942dfaa94f75932fed1fd043fb95d2b045
-
SHA256
5d99ab24811624ef3c5f5d8c9b71009ebe33acfbb235cb58400c2a4b6e0c30bf
-
SHA512
233d58e9a837b5d86ac0f3c4110a41b04c9de97cc6f10150311a725724bb1a913dda74fc043561bd493635bc925b364a9ae794b8fc16fd6d380d16a339849e39
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq1Izmd:nSHIG6mQwGmfOQd8YhY0/EQUG
Score10/10-
Accesses Microsoft Outlook profiles
-