General
-
Target
loki.exe
-
Size
104KB
-
Sample
240426-xl5xnaaa55
-
MD5
94af29468388f69f7cb8332883e5e88e
-
SHA1
8c742ce32790d1e019f74560bfd54face407a114
-
SHA256
a2e76c3fb736565774ea4d0150660e28910115c431a6853cad33dcbe3b410772
-
SHA512
31f41b816482589b398704439794021c56d1ead62c7115c17b8f9038614cf1dca24817e5b4f71024331755952cdfc1f6982b6587ff00495067e9b01519e46582
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Behavioral task
behavioral1
Sample
loki.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
loki.exe
Resource
win10v2004-20240419-en
Malware Config
Extracted
lokibot
http://tampabayllc.top/teamb/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
loki.exe
-
Size
104KB
-
MD5
94af29468388f69f7cb8332883e5e88e
-
SHA1
8c742ce32790d1e019f74560bfd54face407a114
-
SHA256
a2e76c3fb736565774ea4d0150660e28910115c431a6853cad33dcbe3b410772
-
SHA512
31f41b816482589b398704439794021c56d1ead62c7115c17b8f9038614cf1dca24817e5b4f71024331755952cdfc1f6982b6587ff00495067e9b01519e46582
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score10/10-
Accesses Microsoft Outlook profiles
-