General
-
Target
b8e08d9af340c03c185d385ace814ccccaa8cb29331e3531c600a7c6fdd49448
-
Size
648KB
-
Sample
241029-eyw66ssqal
-
MD5
008dfd89696995e2bcc08f06a9c9240a
-
SHA1
3173424fb2320e8a2872f74f8ac9a215458de64a
-
SHA256
b8e08d9af340c03c185d385ace814ccccaa8cb29331e3531c600a7c6fdd49448
-
SHA512
f248855377d6a1a0a8cf2abadb7c6fa1875a1f4648989e765b58dcc97a44dd91a516627c183166e4fa0ee626b30fd896a345b48ed19a3419949c7dabcbe61765
-
SSDEEP
1536:IzvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqTIzmd:bSHIG6mQwGmfOQd8YhY0/E6UG
Behavioral task
behavioral1
Sample
b8e08d9af340c03c185d385ace814ccccaa8cb29331e3531c600a7c6fdd49448.exe
Resource
win7-20240903-en
Malware Config
Extracted
lokibot
http://solutviewmen.viewdns.net/bdifygidj/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
b8e08d9af340c03c185d385ace814ccccaa8cb29331e3531c600a7c6fdd49448
-
Size
648KB
-
MD5
008dfd89696995e2bcc08f06a9c9240a
-
SHA1
3173424fb2320e8a2872f74f8ac9a215458de64a
-
SHA256
b8e08d9af340c03c185d385ace814ccccaa8cb29331e3531c600a7c6fdd49448
-
SHA512
f248855377d6a1a0a8cf2abadb7c6fa1875a1f4648989e765b58dcc97a44dd91a516627c183166e4fa0ee626b30fd896a345b48ed19a3419949c7dabcbe61765
-
SSDEEP
1536:IzvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqTIzmd:bSHIG6mQwGmfOQd8YhY0/E6UG
-
Lokibot family
-
Accesses Microsoft Outlook profiles
-