General
-
Target
de15a4b599a6ceee49c5aa841da6a027
-
Size
704KB
-
Sample
240325-qdgfrsbf3v
-
MD5
de15a4b599a6ceee49c5aa841da6a027
-
SHA1
db14b27c83293ca50d82dfbc9f146b85d5be0125
-
SHA256
714da322bbddea4f4defd68c00a173ef2f6cf13695981b2d080bad499081ec40
-
SHA512
0b3c7e943f0a551283598885162e8fc36f8cc284366a23dad1c52bde15ff81fbfcb71b9401e442a32fc3cbf0acd70c5319e019741668262781ee1bdead958585
-
SSDEEP
12288:HhQVh9a17gNm5YnXDdx2OjKhNHySntnMxIKGjP2Af6JXsUVTWjhne6xhLOfAI:HhQVh9FDdx2GKzSStg1AuAks+TiML
Static task
static1
Behavioral task
behavioral1
Sample
de15a4b599a6ceee49c5aa841da6a027.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de15a4b599a6ceee49c5aa841da6a027.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
lokibot
http://lushbb.xyz/mtk2/w2/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
de15a4b599a6ceee49c5aa841da6a027
-
Size
704KB
-
MD5
de15a4b599a6ceee49c5aa841da6a027
-
SHA1
db14b27c83293ca50d82dfbc9f146b85d5be0125
-
SHA256
714da322bbddea4f4defd68c00a173ef2f6cf13695981b2d080bad499081ec40
-
SHA512
0b3c7e943f0a551283598885162e8fc36f8cc284366a23dad1c52bde15ff81fbfcb71b9401e442a32fc3cbf0acd70c5319e019741668262781ee1bdead958585
-
SSDEEP
12288:HhQVh9a17gNm5YnXDdx2OjKhNHySntnMxIKGjP2Af6JXsUVTWjhne6xhLOfAI:HhQVh9FDdx2GKzSStg1AuAks+TiML
Score10/10-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-