lokibot | 10d7249f54ec15458d5fc559e903a845ab4d4ef1108ebf2db0b1e39bbf5d8460

General

Target

2772-30-0x0000000000400000-0x00000000004A2000-memory.dmp
Size

648KB
Sample

240806-tm77matdkm
MD5

851db230dcf2712d3749dc25274f1799
SHA1

d2193529eabf56f91fce23f285aec94a90c2119f
SHA256

10d7249f54ec15458d5fc559e903a845ab4d4ef1108ebf2db0b1e39bbf5d8460
SHA512

b2cb037ba5eb0f701c6a7d3fb13518360f6471f92eb121271926f1e82c6b9e2dc210610e2507849984a996490a942c35dfb6c9db9861ccd70311ded0c4589510
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqrIzmd:nSHIG6mQwGmfOQd8YhY0/ESUG

Score

10^/10

lokibot discovery

Malware Config

Extracted

Family

lokibot

C2

http://tampabayllc.top/moore/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

- Target
  
  2772-30-0x0000000000400000-0x00000000004A2000-memory.dmp
- Size
  
  648KB
- MD5
  
  851db230dcf2712d3749dc25274f1799
- SHA1
  
  d2193529eabf56f91fce23f285aec94a90c2119f
- SHA256
  
  10d7249f54ec15458d5fc559e903a845ab4d4ef1108ebf2db0b1e39bbf5d8460
- SHA512
  
  b2cb037ba5eb0f701c6a7d3fb13518360f6471f92eb121271926f1e82c6b9e2dc210610e2507849984a996490a942c35dfb6c9db9861ccd70311ded0c4589510
- SSDEEP
  
  1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqrIzmd:nSHIG6mQwGmfOQd8YhY0/ESUG
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2