Overview

overview

10

Static

static

3

Pirkimo u�...02.exe

windows7-x64

10

Pirkimo u�...02.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    12022025_0657_Pirkimousakymas__PO40891_UAB-Vilkritis_scan02.exe.iso

  • Size

    254KB

  • Sample

    250212-h1cr4a1qdn

  • MD5

    736255a0bb59b0299db3fc21960eb8f9

  • SHA1

    988c925deaa86b1a786438eb88037f7652364a46

  • SHA256

    c155b7e4e3c75029baaffc7560451e4f150a6543c1e91cf8512e4682efd1b5cf

  • SHA512

    05de081ce4bdb2ef19733b1eac1db1beb631f853e973fdfc67e60a3fe5f9fd9f4361a5a219073ddd404ddf629b7b378aae6549fffca32bfab6881e8d0906f85a

  • SSDEEP

    3072:HUPYPRLDfgZ27Y5+Mi6hDZIHxEpE0Xm2oHMrrqu71l3/rkF0:HUP0RXfKnrH22mMreu7n/w

Score
10/10
lokibotcollectiondiscoveryspywarestealertrojan

Malware Config

Extracted

Family

lokibot

C2

https://ddrtot.shop/New/PWS/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      Pirkimo užsakymas__(PO40891)_UAB-Vilkritis_scan02.exe

    • Size

      194KB

    • MD5

      e161e070cdc4f438c40c4cdc2326fa27

    • SHA1

      5777cc7b1cbdaf545bd38cb57eca9f5966b21171

    • SHA256

      a361358c79a61e6781d0ccd512d2fa7222bd2025346ca9494279c8072129d91f

    • SHA512

      2fc9bf43b31c868c1bf24d82ebe9f754a27187fc3b6bdb40a7592b0c46afd245c22ed425b1f9bb4515b7a5775b15b169588366d9b9bb0aee0902eb16dc7d0ba5

    • SSDEEP

      3072:KUPYPRLDfgZ27Y5+Mi6hDZIHxEpE0Xm2oHMrrqu71l3/rkF0:KUP0RXfKnrH22mMreu7n/w

    Score
    10/10
    lokibotcollectiondiscoveryspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks