lokibot | 9858866322060117510c66c60d6ae99f131491cb22932521ce405c413e9a010a | Triage

Sharing

General

Target

2720-17-0x0000000000400000-0x00000000004A2000-memory.dmp
Size

648KB
Sample

230921-e1x69adb2s
MD5

0cdea174e9cb6a56b930b028f5588ed0
SHA1

f6e0a97f65c299de1d61b0a6d7de4980c63aa4bd
SHA256

9858866322060117510c66c60d6ae99f131491cb22932521ce405c413e9a010a
SHA512

0a0f2d1b13b5bb0fab8bcb201822d7069ff6f2124c0fd590a20e2954656ab97de2c3fdff363433f9cfcb2bc130ffbb312b80241ef84add5abdd59f6f5ffd3717
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmdP:nSHIG6mQwGmfOQd8YhY0/EqUGP

Score

10^/10

lokibot

Malware Config

Extracted

Family

lokibot

C2

http://zsin2.ebnsina.top/_errorpages/zsin2/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

- Target
  
  2720-17-0x0000000000400000-0x00000000004A2000-memory.dmp
- Size
  
  648KB
- MD5
  
  0cdea174e9cb6a56b930b028f5588ed0
- SHA1
  
  f6e0a97f65c299de1d61b0a6d7de4980c63aa4bd
- SHA256
  
  9858866322060117510c66c60d6ae99f131491cb22932521ce405c413e9a010a
- SHA512
  
  0a0f2d1b13b5bb0fab8bcb201822d7069ff6f2124c0fd590a20e2954656ab97de2c3fdff363433f9cfcb2bc130ffbb312b80241ef84add5abdd59f6f5ffd3717
- SSDEEP
  
  1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmdP:nSHIG6mQwGmfOQd8YhY0/EqUGP
Score

3^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2