General

  • Target

    tmpn_lplll3

  • Size

    116KB

  • Sample

    240717-cey6ba1brk

  • MD5

    573c0e68dd70ab65a138d159c5e55c7b

  • SHA1

    b7a1e3c11184bcee033bf5544c7754efaded98bd

  • SHA256

    0e9a9cde396cf2e4fd9f8b265661a9f9b794000f7f7bb42093df4ab5a25f3d96

  • SHA512

    c411cdd2161ee392cb7e298fdfc324e16930550d5532ddc688190c625d5264141bb82004375fd4e42264d7f03013fe3671e05cf71a46596c800503b15af7d43b

  • SSDEEP

    1536:wR4qLqpobtTJCd17sVk000ipaGESp6FbmD3aAS2gpqBW9INcLc0cmwnt4AzD:NpaxJC/7EjRSp6JAS2gpqBWLdaf

Malware Config

Extracted

Family

lokibot

C2

http://104.248.205.66/index.php/pages?s=1

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      tmpn_lplll3

    • Size

      116KB

    • MD5

      573c0e68dd70ab65a138d159c5e55c7b

    • SHA1

      b7a1e3c11184bcee033bf5544c7754efaded98bd

    • SHA256

      0e9a9cde396cf2e4fd9f8b265661a9f9b794000f7f7bb42093df4ab5a25f3d96

    • SHA512

      c411cdd2161ee392cb7e298fdfc324e16930550d5532ddc688190c625d5264141bb82004375fd4e42264d7f03013fe3671e05cf71a46596c800503b15af7d43b

    • SSDEEP

      1536:wR4qLqpobtTJCd17sVk000ipaGESp6FbmD3aAS2gpqBW9INcLc0cmwnt4AzD:NpaxJC/7EjRSp6JAS2gpqBWLdaf

MITRE ATT&CK Enterprise v15

Tasks