Overview

overview

10

Static

static

5

tmpswicz7pm.exe

windows7-x64

10

tmpswicz7pm.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmpswicz7pm

  • Size

    1.3MB

  • Sample

    240518-txj8jscc21

  • MD5

    0d6617a7174bbd7156e7f31b40f5b8b0

  • SHA1

    e1fae724282c52ee4d41c909c7ba28f77df2950f

  • SHA256

    26c693ff2e7bfb43a2476a8ad6c316185a31f65e90f56b2eac3c98393d6a53cf

  • SHA512

    6df443fa2444cec99cc96ac93cf2b2b9b102e96e676ffe8893943a59e0a01446139f6e4415b10846bd7a25222fcfc48ba781903fed771b295179d4fc1d476661

  • SSDEEP

    24576:HAHnh+eWsN3skA4RV1Hom2KXMmHae6BAz/SiYXQlnWGpAJEH5:6h+ZkldoPK8Ya3ArdYXQln+y

Score
10/10
lokibotcollectionpersistencespywarestealertrojan

Malware Config

Extracted

Family

lokibot

C2

http://tjfr.ga/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      tmpswicz7pm

    • Size

      1.3MB

    • MD5

      0d6617a7174bbd7156e7f31b40f5b8b0

    • SHA1

      e1fae724282c52ee4d41c909c7ba28f77df2950f

    • SHA256

      26c693ff2e7bfb43a2476a8ad6c316185a31f65e90f56b2eac3c98393d6a53cf

    • SHA512

      6df443fa2444cec99cc96ac93cf2b2b9b102e96e676ffe8893943a59e0a01446139f6e4415b10846bd7a25222fcfc48ba781903fed771b295179d4fc1d476661

    • SSDEEP

      24576:HAHnh+eWsN3skA4RV1Hom2KXMmHae6BAz/SiYXQlnWGpAJEH5:6h+ZkldoPK8Ya3ArdYXQln+y

    Score
    10/10
    lokibotcollectionpersistencespywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks