General

  • Target

    Shipping documents(BL,PL,INV)pdf.exe

  • Size

    409KB

  • Sample

    201126-wnyxawb3r2

  • MD5

    debfa055a90196038610bd958ed25233

  • SHA1

    a12f4fecfc5a78565156099708b39f975658615e

  • SHA256

    a8f6d5c53f1ce4b3841a24cff74e977bd18ee5d4a7566252f9aed42b4fd01b4d

  • SHA512

    da46db4cf8b000126d5b8660ae66b0c69809cc4fe50e87b1bfc41246e3a296c9a30bb34d7b06a096ab5908548df8a0c0ae812ce12ec235ae986ad9fcb805420c

Malware Config

Extracted

Family

lokibot

C2

http://thunlen.com/chief/alhaji/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      Shipping documents(BL,PL,INV)pdf.exe

    • Size

      409KB

    • MD5

      debfa055a90196038610bd958ed25233

    • SHA1

      a12f4fecfc5a78565156099708b39f975658615e

    • SHA256

      a8f6d5c53f1ce4b3841a24cff74e977bd18ee5d4a7566252f9aed42b4fd01b4d

    • SHA512

      da46db4cf8b000126d5b8660ae66b0c69809cc4fe50e87b1bfc41246e3a296c9a30bb34d7b06a096ab5908548df8a0c0ae812ce12ec235ae986ad9fcb805420c

MITRE ATT&CK Matrix

Tasks