General
-
Target
24d305123c5361792d4f789d81898620407224bb94bac49f02580ccdbf67e7e6
-
Size
641KB
-
Sample
230131-c5j43sed48
-
MD5
f55672ba87003ac43bc15b2124ac6baf
-
SHA1
d5926201457bf74259501fc2be816f8175563d97
-
SHA256
24d305123c5361792d4f789d81898620407224bb94bac49f02580ccdbf67e7e6
-
SHA512
65078d56924d5d6f5315d07261665c45b9af6e883316031f2c5928c6b3dc4334ad188d6fe3a6034b8df2a21f3d7291b984aa66a2c390e881742ee65fbe244300
-
SSDEEP
12288:iSQf4ilP0/c5d5UzIvog0zZYWeh3ih9H1Agu:w4ilPSc5f6Mog6ZYBYTeg
Static task
static1
Behavioral task
behavioral1
Sample
24d305123c5361792d4f789d81898620407224bb94bac49f02580ccdbf67e7e6.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
lokibot
http://171.22.30.147/gk1/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
24d305123c5361792d4f789d81898620407224bb94bac49f02580ccdbf67e7e6
-
Size
641KB
-
MD5
f55672ba87003ac43bc15b2124ac6baf
-
SHA1
d5926201457bf74259501fc2be816f8175563d97
-
SHA256
24d305123c5361792d4f789d81898620407224bb94bac49f02580ccdbf67e7e6
-
SHA512
65078d56924d5d6f5315d07261665c45b9af6e883316031f2c5928c6b3dc4334ad188d6fe3a6034b8df2a21f3d7291b984aa66a2c390e881742ee65fbe244300
-
SSDEEP
12288:iSQf4ilP0/c5d5UzIvog0zZYWeh3ih9H1Agu:w4ilPSc5f6Mog6ZYBYTeg
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-