General
-
Target
0edfa50964df5e64c1072e528dcc884c.exe
-
Size
104KB
-
Sample
240529-zm6axshd8x
-
MD5
0edfa50964df5e64c1072e528dcc884c
-
SHA1
012856ad6c2afaa7748d1ba02ce7fdec623b0eee
-
SHA256
870725e89161945a6c45da72a9930d718850e96995d6e11e2451af1de45ceaf4
-
SHA512
e34f7ded95082f75d62d5d12b90d6a5da715ddcf5a62b31234f11a4ee77ed9def186d937f4d2509b01b97db59c8943a49d7dea36a8d7c68913afa0b2a7b4467b
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqlIzmdA:nSHIG6mQwGmfOQd8YhY0/EUUG
Behavioral task
behavioral1
Sample
0edfa50964df5e64c1072e528dcc884c.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0edfa50964df5e64c1072e528dcc884c.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
lokibot
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
0edfa50964df5e64c1072e528dcc884c.exe
-
Size
104KB
-
MD5
0edfa50964df5e64c1072e528dcc884c
-
SHA1
012856ad6c2afaa7748d1ba02ce7fdec623b0eee
-
SHA256
870725e89161945a6c45da72a9930d718850e96995d6e11e2451af1de45ceaf4
-
SHA512
e34f7ded95082f75d62d5d12b90d6a5da715ddcf5a62b31234f11a4ee77ed9def186d937f4d2509b01b97db59c8943a49d7dea36a8d7c68913afa0b2a7b4467b
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqlIzmdA:nSHIG6mQwGmfOQd8YhY0/EUUG
Score10/10-
Accesses Microsoft Outlook profiles
-