General
-
Target
b0bc9570f1a138aa4d33656df1a3aa58a0a132cbc238485c839466d37c3858c0
-
Size
946KB
-
Sample
230605-drg81afc2t
-
MD5
38c35f7cee27de259b37b8ff53518658
-
SHA1
204799c56e795050472758835472371e1f4d80d9
-
SHA256
b0bc9570f1a138aa4d33656df1a3aa58a0a132cbc238485c839466d37c3858c0
-
SHA512
862cc08b117d36cc5bc7c8b6130153002075ce024d8dae63eadb06751ea7895960b3460cb95c92f2b9334564c39d45c0b5349b06e337de79461fe2f24e1a86bf
-
SSDEEP
12288:kxjSGvh24hStpl+3YKA52XmvRV7AFY7qcMykqQrAp8weMuZd:3pumvR8Kqmkdl7d
Static task
static1
Behavioral task
behavioral1
Sample
b0bc9570f1a138aa4d33656df1a3aa58a0a132cbc238485c839466d37c3858c0.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
lokibot
http://171.22.30.164/joker/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
b0bc9570f1a138aa4d33656df1a3aa58a0a132cbc238485c839466d37c3858c0
-
Size
946KB
-
MD5
38c35f7cee27de259b37b8ff53518658
-
SHA1
204799c56e795050472758835472371e1f4d80d9
-
SHA256
b0bc9570f1a138aa4d33656df1a3aa58a0a132cbc238485c839466d37c3858c0
-
SHA512
862cc08b117d36cc5bc7c8b6130153002075ce024d8dae63eadb06751ea7895960b3460cb95c92f2b9334564c39d45c0b5349b06e337de79461fe2f24e1a86bf
-
SSDEEP
12288:kxjSGvh24hStpl+3YKA52XmvRV7AFY7qcMykqQrAp8weMuZd:3pumvR8Kqmkdl7d
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-