General
-
Target
0371000451985042023.exe
-
Size
480KB
-
Sample
230508-gm2cvsba3t
-
MD5
73ee75a3b189e365394f9eb0f3f14a32
-
SHA1
2898a83f0af8eaa0f6300aac11d4953ba0531b1b
-
SHA256
6d4b6902689bfea045b5dcb0ae5357cd840886cde981343be7d437696b369cc5
-
SHA512
2a8dbe5eb5eb7e59d2b0b1cbcf51b1053c22de78edb709ce738c5fed8b26985fbd5c54b8638fdee29256a4154867c14262971235c4359d91ace261546dcc2c1b
-
SSDEEP
12288:q0GgIoZBU0/yn0R4CydilKstt92FhUgMkY3Zcqi:qhg806n0R4Cydi9bAh3
Static task
static1
Behavioral task
behavioral1
Sample
0371000451985042023.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0371000451985042023.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
lokibot
http://104.156.227.195/~blog/?p=407596278315634
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
0371000451985042023.exe
-
Size
480KB
-
MD5
73ee75a3b189e365394f9eb0f3f14a32
-
SHA1
2898a83f0af8eaa0f6300aac11d4953ba0531b1b
-
SHA256
6d4b6902689bfea045b5dcb0ae5357cd840886cde981343be7d437696b369cc5
-
SHA512
2a8dbe5eb5eb7e59d2b0b1cbcf51b1053c22de78edb709ce738c5fed8b26985fbd5c54b8638fdee29256a4154867c14262971235c4359d91ace261546dcc2c1b
-
SSDEEP
12288:q0GgIoZBU0/yn0R4CydilKstt92FhUgMkY3Zcqi:qhg806n0R4Cydi9bAh3
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-