General
-
Target
Awb# 8457108962.exe
-
Size
722KB
-
Sample
230328-pea5psah77
-
MD5
441afd1c6eeb94fff021df301abc9022
-
SHA1
7dfb9eb80222331394bb29de4b8d5bd5fbc8f707
-
SHA256
a4d692bd2c6bc99530e231e63c93ee24629894b4f9391debdafcc0c161ec972d
-
SHA512
4de464cbc1202860125be4a620e03ff8ae969a39aa2cf234473c08fc6115211367fac8ea2e8292501042ecdb634f3d96fb8496cf962681259fbd52716c25d45c
-
SSDEEP
12288:PA5LB0OURwLj34dvxk8lk1tE44/8Td686j28JhZ:PA5VBLj34dvx8164j68JqD
Static task
static1
Behavioral task
behavioral1
Sample
Awb# 8457108962.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Awb# 8457108962.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
lokibot
http://64.227.48.212/?page_id=6303
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
Awb# 8457108962.exe
-
Size
722KB
-
MD5
441afd1c6eeb94fff021df301abc9022
-
SHA1
7dfb9eb80222331394bb29de4b8d5bd5fbc8f707
-
SHA256
a4d692bd2c6bc99530e231e63c93ee24629894b4f9391debdafcc0c161ec972d
-
SHA512
4de464cbc1202860125be4a620e03ff8ae969a39aa2cf234473c08fc6115211367fac8ea2e8292501042ecdb634f3d96fb8496cf962681259fbd52716c25d45c
-
SSDEEP
12288:PA5LB0OURwLj34dvxk8lk1tE44/8Td686j28JhZ:PA5VBLj34dvx8164j68JqD
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-