General
-
Target
TRANSFERENCIA RÁPIDA.exe
-
Size
512KB
-
Sample
230208-zwaklsgc92
-
MD5
1086aab81143886e9f560384829f7c6f
-
SHA1
d9855483093d9a6ed8844c490fb6718437bcbc3f
-
SHA256
66c8806ba383d1c3671492bff679e2ee9e5f4d384b5a317a44ff45c4410a1e86
-
SHA512
e11fba1774658df4b824ad83224f8ba347cfcbd2d1108ea2be23c5fc820ce02ff2c9de1d1d919174d85d00dce56c5205be1c4813fe964645cc3641dfe7133ddd
-
SSDEEP
12288:OHOSiPb+HT0qE8S6S7ztLHKNu+A+/1bkYbupzTY0tKGIfpBGrQk2SP8D:Oub8vOztLHKNu+A+/1b9bupzrd8GrQkY
Static task
static1
Behavioral task
behavioral1
Sample
TRANSFERENCIA RÁPIDA.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
TRANSFERENCIA RÁPIDA.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
lokibot
https://sempersim.su/ha7/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
TRANSFERENCIA RÁPIDA.exe
-
Size
512KB
-
MD5
1086aab81143886e9f560384829f7c6f
-
SHA1
d9855483093d9a6ed8844c490fb6718437bcbc3f
-
SHA256
66c8806ba383d1c3671492bff679e2ee9e5f4d384b5a317a44ff45c4410a1e86
-
SHA512
e11fba1774658df4b824ad83224f8ba347cfcbd2d1108ea2be23c5fc820ce02ff2c9de1d1d919174d85d00dce56c5205be1c4813fe964645cc3641dfe7133ddd
-
SSDEEP
12288:OHOSiPb+HT0qE8S6S7ztLHKNu+A+/1bkYbupzTY0tKGIfpBGrQk2SP8D:Oub8vOztLHKNu+A+/1b9bupzrd8GrQkY
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-