General
-
Target
178ce60d0053046526de8950692f201d99d2ae579a514247bb0a902af83ba1c1N
-
Size
648KB
-
Sample
241107-tmr6eavhmn
-
MD5
212470a505e2ba37173ee96a7e9ad720
-
SHA1
27abd375698a2164895e30b64ce30cc44040da04
-
SHA256
178ce60d0053046526de8950692f201d99d2ae579a514247bb0a902af83ba1c1
-
SHA512
d2640263be81669f337a9701309583f9138658866c14d02f85566b0264e6706042c80eb5d3336fbf9f01147d5b967f9c21b74a81c72266b86910b5da3ef646d1
-
SSDEEP
1536:IzvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:bSHIG6mQwGmfOQd8YhY0/EqUG
Behavioral task
behavioral1
Sample
178ce60d0053046526de8950692f201d99d2ae579a514247bb0a902af83ba1c1N.exe
Resource
win7-20240903-en
Malware Config
Extracted
lokibot
http://45.66.231.242/mdifygidj/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
178ce60d0053046526de8950692f201d99d2ae579a514247bb0a902af83ba1c1N
-
Size
648KB
-
MD5
212470a505e2ba37173ee96a7e9ad720
-
SHA1
27abd375698a2164895e30b64ce30cc44040da04
-
SHA256
178ce60d0053046526de8950692f201d99d2ae579a514247bb0a902af83ba1c1
-
SHA512
d2640263be81669f337a9701309583f9138658866c14d02f85566b0264e6706042c80eb5d3336fbf9f01147d5b967f9c21b74a81c72266b86910b5da3ef646d1
-
SSDEEP
1536:IzvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:bSHIG6mQwGmfOQd8YhY0/EqUG
-
Lokibot family
-
Accesses Microsoft Outlook profiles
-