General
-
Target
tmp
-
Size
324KB
-
Sample
230126-v33graee87
-
MD5
c98fd628f48ea8674c35931367a586e9
-
SHA1
5e533508df3484201795dfc4e3c47e1458d2f97a
-
SHA256
8f2a0dc81907a6d52ac8497d7ca4dcdcdb6ec549a3c179d51941a76075cad38f
-
SHA512
0fe53a4aade2997be86d1a15db5fdc1e40d88a195e3ae5b49d8ddd26fccffd39eb2db4bf000d9c017e9695294ff98655219eb63e1fff717725d7add8ad5f21ea
-
SSDEEP
6144:WDLhFuOKnKUg/DEWuS9L0CY0+MOKXe5UT:WDTtKnDiVu4L05WC5UT
Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
lokibot
http://171.22.30.164/mous/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
tmp
-
Size
324KB
-
MD5
c98fd628f48ea8674c35931367a586e9
-
SHA1
5e533508df3484201795dfc4e3c47e1458d2f97a
-
SHA256
8f2a0dc81907a6d52ac8497d7ca4dcdcdb6ec549a3c179d51941a76075cad38f
-
SHA512
0fe53a4aade2997be86d1a15db5fdc1e40d88a195e3ae5b49d8ddd26fccffd39eb2db4bf000d9c017e9695294ff98655219eb63e1fff717725d7add8ad5f21ea
-
SSDEEP
6144:WDLhFuOKnKUg/DEWuS9L0CY0+MOKXe5UT:WDTtKnDiVu4L05WC5UT
Score10/10-
Accesses Microsoft Outlook profiles
-