lokibot | 87eab1ae80c20e7e96c9299f0f0e6c730f461f062d4859ab667c958a12a78990 | Triage

Sharing

General

Target

2884-16-0x0000000000400000-0x00000000004A2000-memory.dmp
Size

648KB
Sample

230922-ck634sbh2z
MD5

1720d75f508ab3a33902e708763b4641
SHA1

a6a127e865f1df3ba93fd14e70f222618b934403
SHA256

87eab1ae80c20e7e96c9299f0f0e6c730f461f062d4859ab667c958a12a78990
SHA512

f1157f5816a978b628aacb08afe502ef340379a531751b95b85c280dabf7331bd76bfe20ade8c8a8fcb5e0c6e64839dbe6a0f79bddc7e42a56c6cd32428c895b
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score

10^/10

lokibot

Malware Config

Extracted

Family

lokibot

C2

http://185.216.71.207/_errorpages/space/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

- Target
  
  2884-16-0x0000000000400000-0x00000000004A2000-memory.dmp
- Size
  
  648KB
- MD5
  
  1720d75f508ab3a33902e708763b4641
- SHA1
  
  a6a127e865f1df3ba93fd14e70f222618b934403
- SHA256
  
  87eab1ae80c20e7e96c9299f0f0e6c730f461f062d4859ab667c958a12a78990
- SHA512
  
  f1157f5816a978b628aacb08afe502ef340379a531751b95b85c280dabf7331bd76bfe20ade8c8a8fcb5e0c6e64839dbe6a0f79bddc7e42a56c6cd32428c895b
- SSDEEP
  
  1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score

3^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2