General

  • Target

    3HPbPt1C3AHy1z1.exe

  • Size

    737KB

  • Sample

    210114-l99ffng78n

  • MD5

    2326bda19645c06e4f99aeb8b740cbc1

  • SHA1

    592467238289914c031935cf2c418dc38a14b818

  • SHA256

    0006f7b92348baf0f9da231dc6553defe4e9ce190eff4f1617b81cc3fabbce86

  • SHA512

    131bb52086e0e7f5e571ecc3ba7f2edeca2dae9dd5f987762a61152fef70922063e06b75a88bd268e7e53a8ce9a6d195f9e99deb49f3f00e9e2bb2fba9701980

Malware Config

Extracted

Family

lokibot

C2

http://paciflxinc.com/zoro/zoro1/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      3HPbPt1C3AHy1z1.exe

    • Size

      737KB

    • MD5

      2326bda19645c06e4f99aeb8b740cbc1

    • SHA1

      592467238289914c031935cf2c418dc38a14b818

    • SHA256

      0006f7b92348baf0f9da231dc6553defe4e9ce190eff4f1617b81cc3fabbce86

    • SHA512

      131bb52086e0e7f5e571ecc3ba7f2edeca2dae9dd5f987762a61152fef70922063e06b75a88bd268e7e53a8ce9a6d195f9e99deb49f3f00e9e2bb2fba9701980

MITRE ATT&CK Matrix

Tasks