lokibot | 4ef9adb2b9fbe473117fa466136ff3dffab003776d69443d89790efe93dc5e3e

General

Target

4ef9adb2b9fbe473117fa466136ff3dffab003776d69443d89790efe93dc5e3e
Size

648KB
Sample

240811-zv2byascnd
MD5

416dfd025610df42d8fc5d6c1c25cba6
SHA1

82ae1cb1e62c60e5dc4f7adc3a37bc23a864783a
SHA256

4ef9adb2b9fbe473117fa466136ff3dffab003776d69443d89790efe93dc5e3e
SHA512

d12558b684c8853d9d488f338f191217886fa270e24dfeec39390ab807d8efdd66cdc1fdd66cf5bad53baa61cf777b7288860bee0a61c7d4ee0841c4170d1e30
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqeXIzmd:nSHIG6mQwGmfOQd8YhY0/EnUG

Score

10^/10

lokibot discovery

Malware Config

Extracted

Family

lokibot

C2

http://104.248.205.66/index.php/wp?s=831

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

- Target
  
  4ef9adb2b9fbe473117fa466136ff3dffab003776d69443d89790efe93dc5e3e
- Size
  
  648KB
- MD5
  
  416dfd025610df42d8fc5d6c1c25cba6
- SHA1
  
  82ae1cb1e62c60e5dc4f7adc3a37bc23a864783a
- SHA256
  
  4ef9adb2b9fbe473117fa466136ff3dffab003776d69443d89790efe93dc5e3e
- SHA512
  
  d12558b684c8853d9d488f338f191217886fa270e24dfeec39390ab807d8efdd66cdc1fdd66cf5bad53baa61cf777b7288860bee0a61c7d4ee0841c4170d1e30
- SSDEEP
  
  1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqeXIzmd:nSHIG6mQwGmfOQd8YhY0/EnUG
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2