lokibot | edba578f96c7ca4d3331bf2497b426e6f0230da44e21167fec3df78e62cbc48c | Triage

Sharing

General

Target

2232-18-0x0000000000400000-0x00000000004A2000-memory.dmp
Size

648KB
Sample

230921-q8tpksgd8y
MD5

7d4f797ef91e6725bc665c368ab7461f
SHA1

4d645750e26b2365aa0b644f4e40f84988128d4b
SHA256

edba578f96c7ca4d3331bf2497b426e6f0230da44e21167fec3df78e62cbc48c
SHA512

d1b90059c219a57219117b5c9d1ddefad531299088d4247d0d4f77c42f97a694d322c40dd0b0b936958b8219fb69fee65ab02694b257df02d4611c53fe80a50c
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score

10^/10

lokibot

Malware Config

Extracted

Family

lokibot

C2

http://ugopounds.caesarsgroup.top/_errorpages/ugopounds/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

- Target
  
  2232-18-0x0000000000400000-0x00000000004A2000-memory.dmp
- Size
  
  648KB
- MD5
  
  7d4f797ef91e6725bc665c368ab7461f
- SHA1
  
  4d645750e26b2365aa0b644f4e40f84988128d4b
- SHA256
  
  edba578f96c7ca4d3331bf2497b426e6f0230da44e21167fec3df78e62cbc48c
- SHA512
  
  d1b90059c219a57219117b5c9d1ddefad531299088d4247d0d4f77c42f97a694d322c40dd0b0b936958b8219fb69fee65ab02694b257df02d4611c53fe80a50c
- SSDEEP
  
  1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score

3^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2