General
-
Target
7b49315a07d92562008785f18022b53b380f999abe92a6d4014c014461660dff.exe
-
Size
648KB
-
Sample
241215-eckw1svmcj
-
MD5
993077fad9d5dd79b70d18f348b9b20d
-
SHA1
740a1df09e85f60e86722ec939df2874d63ba2e0
-
SHA256
7b49315a07d92562008785f18022b53b380f999abe92a6d4014c014461660dff
-
SHA512
1688bd7baea5dbcb2c7e42269911e7295b359d640e28e96d8d906f585b5218430e8713133663f63676ef791eaa53b2da92b3efee3dbcd623c25c4ee40605d42b
-
SSDEEP
1536:yzvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqiIzmd:JSHIG6mQwGmfOQd8YhY0/E/UG
Behavioral task
behavioral1
Sample
7b49315a07d92562008785f18022b53b380f999abe92a6d4014c014461660dff.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7b49315a07d92562008785f18022b53b380f999abe92a6d4014c014461660dff.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
lokibot
http://94.156.177.41/davinci/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
7b49315a07d92562008785f18022b53b380f999abe92a6d4014c014461660dff.exe
-
Size
648KB
-
MD5
993077fad9d5dd79b70d18f348b9b20d
-
SHA1
740a1df09e85f60e86722ec939df2874d63ba2e0
-
SHA256
7b49315a07d92562008785f18022b53b380f999abe92a6d4014c014461660dff
-
SHA512
1688bd7baea5dbcb2c7e42269911e7295b359d640e28e96d8d906f585b5218430e8713133663f63676ef791eaa53b2da92b3efee3dbcd623c25c4ee40605d42b
-
SSDEEP
1536:yzvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqiIzmd:JSHIG6mQwGmfOQd8YhY0/E/UG
Score7/10-
Accesses Microsoft Outlook profiles
-