Overview

overview

10

Static

static

DOCUMENT.EXE

windows7_x64

10

DOCUMENT.EXE

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    documentos001DHL.img

  • Size

    1.5MB

  • Sample

    210624-atws2lwrx6

  • MD5

    b6b4f5c011e5bc56d87717561f31abe6

  • SHA1

    05678de4272666a0266c193bc33d9f63c2afe5a1

  • SHA256

    5d1391ea80cf7ee1224e6aad2efd55001e56254a24f217b674963b930e7fb2f4

  • SHA512

    6dfd8e9e795f1522d2d4378bca6c413df1c6eab45c9554c70591a5bef7f29aef3866b1d6f421f63bb53218a92ff5224e6102ae0409c3456bba5f251db2a777de

Score
10/10
lokibotspywarestealertrojan

Malware Config

Extracted

Family

lokibot

C2

http://63.141.228.141/32.php/209hwrrIygNFO

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      DOCUMENT.EXE

    • Size

      952KB

    • MD5

      ad08c92ae55a9e4012e2cfc6f37cd89f

    • SHA1

      7cf08e1b6a8026060a70de0da3bc4f4dedf7daa5

    • SHA256

      887f31546a3f8f121475b862fbbb75cea8b515464a09c4f64e9add56792718c3

    • SHA512

      b9c87b5acc3dc64170f0a3b41a27237d06077a0acfc652e70f51bee457811c1145aeac9aaba7c1ebe954229798142c57cceba80350a11c6a212ad88fdcc93f9a

    Score
    10/10
    lokibotspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks