General
-
Target
62ABC4447D8B6877CAB7A721E0331450.exe
-
Size
934KB
-
Sample
250220-rdx9ysyjv4
-
MD5
62abc4447d8b6877cab7a721e0331450
-
SHA1
0fb7673b2437afa906299a676caf4c2a177c4b89
-
SHA256
e0c5db8ba3b32956b954091828136618e0130b148675dbb153c0b77b77e2d1d4
-
SHA512
44ca11519e0c58d7000bbb081101094177812516a467b12268b1be7ae8a8e04dd284abee3464b2524c7ecb229aeb80096f8d7f367102f4b1fac1823221c3cb4a
-
SSDEEP
24576:uu6J33O0c+JY5UZ+XC0kGso6Far3Vx3WY:gu0c++OCvkGs9FarFkY
Static task
static1
Behavioral task
behavioral1
Sample
62ABC4447D8B6877CAB7A721E0331450.exe
Resource
win7-20240903-en
Malware Config
Extracted
lokibot
http://touxzw.ir/sccc/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
62ABC4447D8B6877CAB7A721E0331450.exe
-
Size
934KB
-
MD5
62abc4447d8b6877cab7a721e0331450
-
SHA1
0fb7673b2437afa906299a676caf4c2a177c4b89
-
SHA256
e0c5db8ba3b32956b954091828136618e0130b148675dbb153c0b77b77e2d1d4
-
SHA512
44ca11519e0c58d7000bbb081101094177812516a467b12268b1be7ae8a8e04dd284abee3464b2524c7ecb229aeb80096f8d7f367102f4b1fac1823221c3cb4a
-
SSDEEP
24576:uu6J33O0c+JY5UZ+XC0kGso6Far3Vx3WY:gu0c++OCvkGs9FarFkY
-
Lokibot family
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-