General
-
Target
8c3c941efdc044a57a89a4163918acb2.exe
-
Size
192KB
-
Sample
230224-rxft1she5x
-
MD5
8c3c941efdc044a57a89a4163918acb2
-
SHA1
1682b1832b65cb2a6ee775a5e4f2c024058acdb7
-
SHA256
1f973d307ac6766796e6abcaf1c71b8e506859ebf82d9d176fafc564383b2e20
-
SHA512
7fa397240fc455b288c6c3306d00b75660e942849b9510fea2a84223f1b9b15947ecf86b06a9cd25af7be58126db4e224e6e289f283809f2ec932608a93a4994
-
SSDEEP
3072:25mJMInhU7WuCr4VT+3HmDqg4Aa2oAnq5mnzL/:3PhCWuCryT+Wm8a5QP
Static task
static1
Behavioral task
behavioral1
Sample
8c3c941efdc044a57a89a4163918acb2.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
8c3c941efdc044a57a89a4163918acb2.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
lokibot
https://sempersim.su/ha19/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
8c3c941efdc044a57a89a4163918acb2.exe
-
Size
192KB
-
MD5
8c3c941efdc044a57a89a4163918acb2
-
SHA1
1682b1832b65cb2a6ee775a5e4f2c024058acdb7
-
SHA256
1f973d307ac6766796e6abcaf1c71b8e506859ebf82d9d176fafc564383b2e20
-
SHA512
7fa397240fc455b288c6c3306d00b75660e942849b9510fea2a84223f1b9b15947ecf86b06a9cd25af7be58126db4e224e6e289f283809f2ec932608a93a4994
-
SSDEEP
3072:25mJMInhU7WuCr4VT+3HmDqg4Aa2oAnq5mnzL/:3PhCWuCryT+Wm8a5QP
Score10/10-
Accesses Microsoft Outlook profiles
-