General

  • Target

    http://196.251.92.64/crypt/Devil.exe

  • Sample

    250219-d1bgtawler

Malware Config

Extracted

Family

lokibot

C2

https://rottot.shop/Devil/PWS/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

MITRE ATT&CK Enterprise v15

Tasks