Overview

overview

10

Static

static

gunzipped.exe

windows7_x64

10

gunzipped.exe

windows10_x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    gunzipped.exe

  • Size

    236KB

  • Sample

    210728-x97542sp32

  • MD5

    3ee7e6077761b5bfcade500c9e40c6bb

  • SHA1

    45241bef92ee69bd313591dd25a7e312ffdb8c13

  • SHA256

    461edbd6fb0c418598aeb3873c4bd4f7837ab93ea946324dfc88595f195f8ddf

  • SHA512

    311d853cf2866967956a729ffa0030dd71cedb7cb9e45c903c6c879466337d028d1465ae5c2a685ea3e190e91432ee4341f73473ba6e3378459f6dd921c712f4

Score
10/10
lokibotspywarestealersuricatatrojan

Malware Config

Extracted

Family

lokibot

C2

http://37.0.11.12/ocxz/oki/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      gunzipped.exe

    • Size

      236KB

    • MD5

      3ee7e6077761b5bfcade500c9e40c6bb

    • SHA1

      45241bef92ee69bd313591dd25a7e312ffdb8c13

    • SHA256

      461edbd6fb0c418598aeb3873c4bd4f7837ab93ea946324dfc88595f195f8ddf

    • SHA512

      311d853cf2866967956a729ffa0030dd71cedb7cb9e45c903c6c879466337d028d1465ae5c2a685ea3e190e91432ee4341f73473ba6e3378459f6dd921c712f4

    Score
    10/10
    lokibotspywarestealersuricatatrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks