General
-
Target
1fdc4438d95bee4acbc67ddb7f04a003cda5e7dff7833a7e8cf6d10f68d812c9
-
Size
650KB
-
Sample
230130-lf55pahh55
-
MD5
b369e27798be3c55cfb1634d515a1302
-
SHA1
4a0b3ed094298a8d5535199c70e43c481aa2cc0c
-
SHA256
1fdc4438d95bee4acbc67ddb7f04a003cda5e7dff7833a7e8cf6d10f68d812c9
-
SHA512
af5bb6a2f83ffb390eb17881d28b335970f2d0ade2e738a5fad5bcc77f0ee7454cbde48e57fda375a462c6dffce4e202ac85efce4ef4da6c4a5dc04e228ea19d
-
SSDEEP
12288:sh0o9eb3frSC1ptaFNIUqGGghnmWeh3ih9HUA:s+o9A3frS4Gjb4ghmBYTt
Static task
static1
Behavioral task
behavioral1
Sample
1fdc4438d95bee4acbc67ddb7f04a003cda5e7dff7833a7e8cf6d10f68d812c9.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
lokibot
http://171.22.30.147/kelly/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
1fdc4438d95bee4acbc67ddb7f04a003cda5e7dff7833a7e8cf6d10f68d812c9
-
Size
650KB
-
MD5
b369e27798be3c55cfb1634d515a1302
-
SHA1
4a0b3ed094298a8d5535199c70e43c481aa2cc0c
-
SHA256
1fdc4438d95bee4acbc67ddb7f04a003cda5e7dff7833a7e8cf6d10f68d812c9
-
SHA512
af5bb6a2f83ffb390eb17881d28b335970f2d0ade2e738a5fad5bcc77f0ee7454cbde48e57fda375a462c6dffce4e202ac85efce4ef4da6c4a5dc04e228ea19d
-
SSDEEP
12288:sh0o9eb3frSC1ptaFNIUqGGghnmWeh3ih9HUA:s+o9A3frS4Gjb4ghmBYTt
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-