lokibot | 108beea1eeec439498c3c540fb16d3ae881eac1b5fda1dbe2d2000481a074d6e

General

Target

JaffaCakes118_108beea1eeec439498c3c540fb16d3ae881eac1b5fda1dbe2d2000481a074d6e
Size

648KB
Sample

241224-mgv7jsvpam
MD5

71b63585f7b7f671bf00ffc2d0f58941
SHA1

f9ddb9df9fdef5f605ba2f64406a39fd7bd998be
SHA256

108beea1eeec439498c3c540fb16d3ae881eac1b5fda1dbe2d2000481a074d6e
SHA512

3bfc5d517d4c50458b0979fa0770fd01479ad0111057cf6c1a53528ef3c3b88ba3055847e13a1179e4ea3c44d68e41eca90693134c03173a2f52c1f9bdfffbe2
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score

10^/10

lokibot discovery

Malware Config

Extracted

Family

lokibot

C2

http://sempersim.su/gf17/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

- Target
  
  JaffaCakes118_108beea1eeec439498c3c540fb16d3ae881eac1b5fda1dbe2d2000481a074d6e
- Size
  
  648KB
- MD5
  
  71b63585f7b7f671bf00ffc2d0f58941
- SHA1
  
  f9ddb9df9fdef5f605ba2f64406a39fd7bd998be
- SHA256
  
  108beea1eeec439498c3c540fb16d3ae881eac1b5fda1dbe2d2000481a074d6e
- SHA512
  
  3bfc5d517d4c50458b0979fa0770fd01479ad0111057cf6c1a53528ef3c3b88ba3055847e13a1179e4ea3c44d68e41eca90693134c03173a2f52c1f9bdfffbe2
- SSDEEP
  
  1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2