General
-
Target
tmp
-
Size
270KB
-
Sample
240308-h73xvsac27
-
MD5
73c657530106f88ed80ebb0164f6df3b
-
SHA1
d5140285aa723f195c33568d447684a992bce72b
-
SHA256
ee1604521a659410ad344b12e789d35572a6db48edb3e769c6bccdcfdfa568dd
-
SHA512
9f2dcc6806f59f6a9f95bebd7d212b5933573f086f4f579b4e0c26f478d06b088d8969fb99c41b86dbbae22b78207479aa7195ae4b65f7a87459c4e4bf3b30cf
-
SSDEEP
3072:++rYKrUg2gdPRPjKpuGC8rWtuow5EmdzMV6dMCZNpfr/Qya6Z:+grxHpuMGmBwRN06dHNpfr/N
Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
lokibot
https://sempersim.su/c8/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
tmp
-
Size
270KB
-
MD5
73c657530106f88ed80ebb0164f6df3b
-
SHA1
d5140285aa723f195c33568d447684a992bce72b
-
SHA256
ee1604521a659410ad344b12e789d35572a6db48edb3e769c6bccdcfdfa568dd
-
SHA512
9f2dcc6806f59f6a9f95bebd7d212b5933573f086f4f579b4e0c26f478d06b088d8969fb99c41b86dbbae22b78207479aa7195ae4b65f7a87459c4e4bf3b30cf
-
SSDEEP
3072:++rYKrUg2gdPRPjKpuGC8rWtuow5EmdzMV6dMCZNpfr/Qya6Z:+grxHpuMGmBwRN06dHNpfr/N
Score10/10-
Accesses Microsoft Outlook profiles
-