General

  • Target
    proforma invoice.exe
  • Size 732KB
  • Sample210618-12hdpgcklj
  • SHA256 3e56d9df1d14f5758330600d1d2fd098a173842fae0447bdf8e6d97a4d2c7162
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • lokibot

C2
  • http://manvim.co/bo/fre.php

  • http://kbfvzoboss.bid/alien/fre.php

  • http://alphastand.trade/alien/fre.php

  • http://alphastand.win/alien/fre.php

  • http://alphastand.top/alien/fre.php

Targets

    • Target
      proforma invoice.exe
    • Size 732KB
    • SHA256 3e56d9df1d14f5758330600d1d2fd098a173842fae0447bdf8e6d97a4d2c7162
    • MD5 SHA1 SHA512

MITRE ATT&CK Matrix

Tasks