General

  • Target

    e1797184663ac087b1641a5f2313f1d7dc2d9d0a0f5d0099a478dd52531bf13b.exe

  • Size

    358KB

  • Sample

    210624-p8xf44xrne

  • MD5

    9962660f061cfa2cc47527ab5a7e87f0

  • SHA1

    ccc0ecaeb700427d8f2435457598b4fab27f029d

  • SHA256

    e1797184663ac087b1641a5f2313f1d7dc2d9d0a0f5d0099a478dd52531bf13b

  • SHA512

    419a71717d33a956367c64210fcfa2a638bf3803532306417cb527215e9ec620f8798f47dccad18ee313d1b1aace22dd0e2f7aab1dc22e1390c3021eaccddc58

Malware Config

Extracted

Family

lokibot

C2

http://manvim.co/fd6/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      e1797184663ac087b1641a5f2313f1d7dc2d9d0a0f5d0099a478dd52531bf13b.exe

    • Size

      358KB

    • MD5

      9962660f061cfa2cc47527ab5a7e87f0

    • SHA1

      ccc0ecaeb700427d8f2435457598b4fab27f029d

    • SHA256

      e1797184663ac087b1641a5f2313f1d7dc2d9d0a0f5d0099a478dd52531bf13b

    • SHA512

      419a71717d33a956367c64210fcfa2a638bf3803532306417cb527215e9ec620f8798f47dccad18ee313d1b1aace22dd0e2f7aab1dc22e1390c3021eaccddc58

MITRE ATT&CK Matrix

Tasks