General
-
Target
VESSEL PARTICULARS & DETAILS_pdf.exe
-
Size
476KB
-
Sample
230131-lm7l4ahf3v
-
MD5
1102b4859e44813c528258469cb84fe0
-
SHA1
3ea4e248bcb17842732a80b47c840b96c488fa6d
-
SHA256
f2fc96c2b9de98a371e1fe00274f90eed2285c991a1598a5143605c58884c745
-
SHA512
8164711aaa4b1c27aabc0817eee118626b83c9d8d9e538e3c2676a2d33d4e50a776bff654203dd9b78f45e5683d5b51676d64a3c117e63d914610ad375260346
-
SSDEEP
12288:9HxhpW0CCgSLiK6NesFFR7SWUcrDr8z9i7+pvHCWtO:9HdCtsnm7UcrDr8zw6Rih
Static task
static1
Behavioral task
behavioral1
Sample
VESSEL PARTICULARS & DETAILS_pdf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
VESSEL PARTICULARS & DETAILS_pdf.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
lokibot
http://171.22.30.147/line/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
VESSEL PARTICULARS & DETAILS_pdf.exe
-
Size
476KB
-
MD5
1102b4859e44813c528258469cb84fe0
-
SHA1
3ea4e248bcb17842732a80b47c840b96c488fa6d
-
SHA256
f2fc96c2b9de98a371e1fe00274f90eed2285c991a1598a5143605c58884c745
-
SHA512
8164711aaa4b1c27aabc0817eee118626b83c9d8d9e538e3c2676a2d33d4e50a776bff654203dd9b78f45e5683d5b51676d64a3c117e63d914610ad375260346
-
SSDEEP
12288:9HxhpW0CCgSLiK6NesFFR7SWUcrDr8z9i7+pvHCWtO:9HdCtsnm7UcrDr8zw6Rih
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-