General

  • Target

    scan_01801021pdf.exe

  • Size

    265KB

  • Sample

    210118-nvdemk1kgs

  • MD5

    290f17a9e8b6647b57eb7c8b3ee85717

  • SHA1

    b86cc8d553f432a507ba24ed724218da09b3d6cb

  • SHA256

    b8f93d593fb0feaa265c385ab4afb8c8e1bb7908b166cf68b6efb36ed1f7fa4f

  • SHA512

    76224f371550b9129f7329af0ea34c182be7819af3779dbf120e8e641796fb90004813cc094369c004bfae7fb5ac02cdc000aed778ba4e7ca4c091d9621e7e43

Malware Config

Extracted

Family

lokibot

C2

http://blueriiver-eu.com/zoro/zoro5/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      scan_01801021pdf.exe

    • Size

      265KB

    • MD5

      290f17a9e8b6647b57eb7c8b3ee85717

    • SHA1

      b86cc8d553f432a507ba24ed724218da09b3d6cb

    • SHA256

      b8f93d593fb0feaa265c385ab4afb8c8e1bb7908b166cf68b6efb36ed1f7fa4f

    • SHA512

      76224f371550b9129f7329af0ea34c182be7819af3779dbf120e8e641796fb90004813cc094369c004bfae7fb5ac02cdc000aed778ba4e7ca4c091d9621e7e43

MITRE ATT&CK Matrix

Tasks