General

  • Target

    bcba831c8adb8887ed3e7e82cb61482f5f6ff19c4b7d84478b6958999c04879c.exe

  • Size

    1.3MB

  • Sample

    210115-cclnj4rkcj

  • MD5

    4e17636b1b64b2039bae2890d1f85b43

  • SHA1

    1b15c3d1e31b255a45b9c2731f82ac71a866bddd

  • SHA256

    bcba831c8adb8887ed3e7e82cb61482f5f6ff19c4b7d84478b6958999c04879c

  • SHA512

    45ee408ba1958fd645ab58ff0242dacbfdba1711bfac293e8cabadf16a6bce765c3416e086cebffee6bdde91343a3e5a9da6253604a6add25969937043798d04

Malware Config

Extracted

Family

lokibot

C2

http://51.195.53.221/p.php/qElaNgWyezEFV

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      bcba831c8adb8887ed3e7e82cb61482f5f6ff19c4b7d84478b6958999c04879c.exe

    • Size

      1.3MB

    • MD5

      4e17636b1b64b2039bae2890d1f85b43

    • SHA1

      1b15c3d1e31b255a45b9c2731f82ac71a866bddd

    • SHA256

      bcba831c8adb8887ed3e7e82cb61482f5f6ff19c4b7d84478b6958999c04879c

    • SHA512

      45ee408ba1958fd645ab58ff0242dacbfdba1711bfac293e8cabadf16a6bce765c3416e086cebffee6bdde91343a3e5a9da6253604a6add25969937043798d04

MITRE ATT&CK Matrix

Tasks