Overview

overview

10

Static

static

3

Pirkimo u�...02.exe

windows7-x64

3

Pirkimo u�...02.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3aa56b253d076233b5b94c64604ebc3f5d0dffabe9939256b76cc955d24539e1

  • Size

    145KB

  • Sample

    250210-qxzrfssrhk

  • MD5

    a68d8f380d9d41f5fc86cd40f27409d1

  • SHA1

    64b9a66cd4bf15805dbde525033b857c63a3b6de

  • SHA256

    3aa56b253d076233b5b94c64604ebc3f5d0dffabe9939256b76cc955d24539e1

  • SHA512

    e36e3b3ef3091b32d5ae82f500d624baf3451a94b07f289d5e7439c39374a9dcd57bcc4105f6f439e14cf0a11e16e5c8583555fb2ca61e00493d31806c8529d1

  • SSDEEP

    3072:gljkfO/seBaEIHdEXE0Xm2QHMrrcu71ltds1p5UzzViBy:kjkfO/rcoH22+MrYu79ds8cy

Score
10/10
lokibotcollectiondiscoveryspywarestealertrojan

Malware Config

Extracted

Family

lokibot

C2

https://ddrtot.shop/New/PWS/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      Pirkimo užsakymas__(PO40891)_UAB-Vilkritis_scan02.exe

    • Size

      194KB

    • MD5

      e161e070cdc4f438c40c4cdc2326fa27

    • SHA1

      5777cc7b1cbdaf545bd38cb57eca9f5966b21171

    • SHA256

      a361358c79a61e6781d0ccd512d2fa7222bd2025346ca9494279c8072129d91f

    • SHA512

      2fc9bf43b31c868c1bf24d82ebe9f754a27187fc3b6bdb40a7592b0c46afd245c22ed425b1f9bb4515b7a5775b15b169588366d9b9bb0aee0902eb16dc7d0ba5

    • SSDEEP

      3072:KUPYPRLDfgZ27Y5+Mi6hDZIHxEpE0Xm2oHMrrqu71l3/rkF0:KUP0RXfKnrH22mMreu7n/w

    Score
    10/10
    discoverylokibotcollectionspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks