General
-
Target
0d4669a03c579e59594575a1a1ee54bc98711b5f1045dbddc61a57cb4e32976a
-
Size
474KB
-
Sample
230131-jvr59sfe73
-
MD5
2e48f709098d4c50ad693672ec645052
-
SHA1
cda4b8faeef1406b0b5991ca4fb7f96e37528c8a
-
SHA256
0d4669a03c579e59594575a1a1ee54bc98711b5f1045dbddc61a57cb4e32976a
-
SHA512
451008fcfda352c7fa6b79db2dbe5ddbe864c7805e9f4519892af58130879edb2c5d7cc5b4456805706fd04ceebf132ebca37c8b7cfed2aa3f5905c61d7c5be4
-
SSDEEP
12288:wr8z9i7+pv9ODFQkZTZPr9Em1PCckBgqtjss8CWtO:wr8zw6R2zZTR36ckBgEDh
Static task
static1
Behavioral task
behavioral1
Sample
0d4669a03c579e59594575a1a1ee54bc98711b5f1045dbddc61a57cb4e32976a.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
lokibot
http://171.22.30.147/gk1/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
0d4669a03c579e59594575a1a1ee54bc98711b5f1045dbddc61a57cb4e32976a
-
Size
474KB
-
MD5
2e48f709098d4c50ad693672ec645052
-
SHA1
cda4b8faeef1406b0b5991ca4fb7f96e37528c8a
-
SHA256
0d4669a03c579e59594575a1a1ee54bc98711b5f1045dbddc61a57cb4e32976a
-
SHA512
451008fcfda352c7fa6b79db2dbe5ddbe864c7805e9f4519892af58130879edb2c5d7cc5b4456805706fd04ceebf132ebca37c8b7cfed2aa3f5905c61d7c5be4
-
SSDEEP
12288:wr8z9i7+pv9ODFQkZTZPr9Em1PCckBgqtjss8CWtO:wr8zw6R2zZTR36ckBgEDh
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-