lokibot | 80374be877577a9c5e7caae64e78b056e3c1619c69629f6b18bb541bc784ff55

General

Target

JaffaCakes118_80374be877577a9c5e7caae64e78b056e3c1619c69629f6b18bb541bc784ff55
Size

648KB
Sample

241225-ywc53awjds
MD5

4feabbdcdad54630e43e596c6caa4257
SHA1

2614a0a21121bda1f105afcd548e3e887d070137
SHA256

80374be877577a9c5e7caae64e78b056e3c1619c69629f6b18bb541bc784ff55
SHA512

8688110d78729151203c6703452a76d62bedc43456c496003b4f1dd43f0f790755b40720298d831f35f8de4196150661ea8bea99b0517d23989b2a0250ed2a1c
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq5Izmd:nSHIG6mQwGmfOQd8YhY0/EMUG

Score

10^/10

lokibot discovery

Malware Config

Extracted

Family

lokibot

C2

http://gorbachetuts.buzz/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

- Target
  
  JaffaCakes118_80374be877577a9c5e7caae64e78b056e3c1619c69629f6b18bb541bc784ff55
- Size
  
  648KB
- MD5
  
  4feabbdcdad54630e43e596c6caa4257
- SHA1
  
  2614a0a21121bda1f105afcd548e3e887d070137
- SHA256
  
  80374be877577a9c5e7caae64e78b056e3c1619c69629f6b18bb541bc784ff55
- SHA512
  
  8688110d78729151203c6703452a76d62bedc43456c496003b4f1dd43f0f790755b40720298d831f35f8de4196150661ea8bea99b0517d23989b2a0250ed2a1c
- SSDEEP
  
  1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq5Izmd:nSHIG6mQwGmfOQd8YhY0/EMUG
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2