Overview

overview

10

Static

static

3

Objednávk...va.exe

windows7-x64

10

Objednávk...va.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    12022025_0654_Objednvka_PO208919_Agropodnik_A.S_Trnava.exe.iso

  • Size

    254KB

  • Sample

    250212-hth1ja1qby

  • MD5

    01892015c0400e228a5e3fa1f16d5a84

  • SHA1

    ddf38f5d75eef2aa28ee6bf8434b0a7b5a842752

  • SHA256

    e2aa2f1e6e61e8da4281e6a167c8a881bda12b26a5e644939a31b27fdbed5cec

  • SHA512

    07d9a4646e749c7d118da848fc32453539563f860aa3c4f0e857e37654f3697fd707a5ee00d640d08e6e6440809c32fb394a6696f7282bb04d09c51bb5f22e20

  • SSDEEP

    3072:EUPYPRLDfgZ27Y5+Mi6hDZIHxEpE0Xm2oHMrrqu71l3/rkF0:EUP0RXfKnrH22mMreu7n/w

Score
10/10
lokibotcollectiondiscoveryspywarestealertrojan

Malware Config

Extracted

Family

lokibot

C2

https://ddrtot.shop/New/PWS/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      Objednávka_(PO208919)_Agropodnik_A.S_Trnava.exe

    • Size

      194KB

    • MD5

      e161e070cdc4f438c40c4cdc2326fa27

    • SHA1

      5777cc7b1cbdaf545bd38cb57eca9f5966b21171

    • SHA256

      a361358c79a61e6781d0ccd512d2fa7222bd2025346ca9494279c8072129d91f

    • SHA512

      2fc9bf43b31c868c1bf24d82ebe9f754a27187fc3b6bdb40a7592b0c46afd245c22ed425b1f9bb4515b7a5775b15b169588366d9b9bb0aee0902eb16dc7d0ba5

    • SSDEEP

      3072:KUPYPRLDfgZ27Y5+Mi6hDZIHxEpE0Xm2oHMrrqu71l3/rkF0:KUP0RXfKnrH22mMreu7n/w

    Score
    10/10
    lokibotcollectiondiscoveryspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks