General

  • Target

    tmpe0rei_8u

  • Size

    225KB

  • Sample

    241202-kyak3aykax

  • MD5

    9a5eb541f9df732ca5158c96cded4ae6

  • SHA1

    9dc7a4e784e7c9cad8eecaaba56bf43e14d30599

  • SHA256

    75173e92fd7a13e7be3ec177c5287280aae4d2a5e6911cd1458400d96289d18d

  • SHA512

    a1e71885ce4e9b05b4075bc8164151109f19b7a6f15cacc09d7c25159f079e584ef525dfd31ea431cc0cb8a93f8950e2614771f769f90769ef55e5f70eceb52f

  • SSDEEP

    3072:k9iIXdVtoSgo/GMEzLr+aTN1m1hN5P4h3ms3QEN+GNstgAMdjFTlN4l5jrVlWdL6:etWSg/Vr++ivxTEsGhAMRzN4nx

Malware Config

Extracted

Family

lokibot

C2

https://ddrtot.shop/MV3/PWS/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      tmpe0rei_8u

    • Size

      225KB

    • MD5

      9a5eb541f9df732ca5158c96cded4ae6

    • SHA1

      9dc7a4e784e7c9cad8eecaaba56bf43e14d30599

    • SHA256

      75173e92fd7a13e7be3ec177c5287280aae4d2a5e6911cd1458400d96289d18d

    • SHA512

      a1e71885ce4e9b05b4075bc8164151109f19b7a6f15cacc09d7c25159f079e584ef525dfd31ea431cc0cb8a93f8950e2614771f769f90769ef55e5f70eceb52f

    • SSDEEP

      3072:k9iIXdVtoSgo/GMEzLr+aTN1m1hN5P4h3ms3QEN+GNstgAMdjFTlN4l5jrVlWdL6:etWSg/Vr++ivxTEsGhAMRzN4nx

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.