Overview

overview

10

Static

static

3

Original 3...92.exe

windows7-x64

1

Original 3...92.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Original 3 - (for Shipper) - 180-38985892.zip

  • Size

    37KB

  • Sample

    230816-ppmlgsag75

  • MD5

    e6c554b153c6fc0b32eb099b433e62bb

  • SHA1

    df2f81b1241ceeef648bdc0fbe65ff1e50da926a

  • SHA256

    32c1ccb6d7fe1e4d25e5dc632c0b556af088812a8c1b305b93701426289d9896

  • SHA512

    b39c11b8cb1a06e56b311443bcbf03ed6e5e5e841b4868694325233fe3e07aba899de401a5e68f152113ba30c923686797c4c4619658b919bd8c1d618df5c190

  • SSDEEP

    768:0fT64VFo9wjA1WvvFqyFitPGGNWs1aUcX4tn9/CeL1OIPUd:w24VFiwjY4V0HNWQPqepHP0

Score
10/10
lokibotpersistencespywarestealertrojan

Malware Config

Extracted

Family

lokibot

C2

http://79.110.48.215/thirdugo/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      Original 3 - (for Shipper) - 180-38985892.exe

    • Size

      82KB

    • MD5

      a1bee18c82eaf97122737ee0fb1e2202

    • SHA1

      3ab614dccd7173f42e16404138ef9809aec20060

    • SHA256

      2f19a13d5de4a03152094890cb3c61b1d01ab5ff758a4d457a5df670f1cb3d75

    • SHA512

      1e33367c546601390e52f9c05c126fd471a802cf1a1ddce41d9374fd41b5e88069d6f44ff5bb76935ffad3d1bf428304ac8bf8bbb34071da8cb0a58560e613c0

    • SSDEEP

      1536:3CMv7TbXyqQJvHyn60ugjYPvHNeF/eReinV4+LCMGMjcLeOYLM3UfLUzjC+:3CMv7TbXyqQJvHywPvC/eReinVLLChMu

    Score
    10/10
    lokibotpersistencespywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks