General
-
Target
d1536a3610f9fcaff434154e76acf2be
-
Size
611KB
-
Sample
240317-tth63sag5w
-
MD5
d1536a3610f9fcaff434154e76acf2be
-
SHA1
c2174f8f5407b8f65bff3771045fa79e256f2009
-
SHA256
f7731deddf1e7d0d5f60c32cd75d7dc3b3a7cac693ff9b69a7a8504236389a08
-
SHA512
e278ba57fb02420674583477540f9a85b9ea9878e7318607db43e324fe1de2e096dfa51b7c18d498a5b6ac5efcd3706ccee8d115ca62bbbaebd9020d67ebee5a
-
SSDEEP
6144:oZ5GeBW54Tu7WKO8tsNQpVrEnwef+eIMrowOjY1lbDc:edS7WXbNQ34wTIDiYDbD
Static task
static1
Behavioral task
behavioral1
Sample
d1536a3610f9fcaff434154e76acf2be.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d1536a3610f9fcaff434154e76acf2be.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
lokibot
http://checkvim.com/fd16/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
d1536a3610f9fcaff434154e76acf2be
-
Size
611KB
-
MD5
d1536a3610f9fcaff434154e76acf2be
-
SHA1
c2174f8f5407b8f65bff3771045fa79e256f2009
-
SHA256
f7731deddf1e7d0d5f60c32cd75d7dc3b3a7cac693ff9b69a7a8504236389a08
-
SHA512
e278ba57fb02420674583477540f9a85b9ea9878e7318607db43e324fe1de2e096dfa51b7c18d498a5b6ac5efcd3706ccee8d115ca62bbbaebd9020d67ebee5a
-
SSDEEP
6144:oZ5GeBW54Tu7WKO8tsNQpVrEnwef+eIMrowOjY1lbDc:edS7WXbNQ34wTIDiYDbD
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-