Overview

overview

10

Static

static

5

Shipping Docs.exe

windows10-ltsc 2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Shipping Docs.exe

  • Size

    933KB

  • Sample

    250221-qrbsfasrbk

  • MD5

    fa64179f49b88c7dcd8f0bd85e690950

  • SHA1

    052efded85afe180db38f693f9d5cd6b17555f5f

  • SHA256

    dcd7d5082c1baf73940d9c5216f2c50ce48dbb85a05065ae01b19d91e1db54a3

  • SHA512

    956409d19f93caffc7809ea3687b88b52af6bb0f0a76119f1d97c47f59984cdc4b913ebae6f97e6c64909ae22c0ee1d99418eb2a0fbf1684e86495326be3b501

  • SSDEEP

    24576:9u6J33O0c+JY5UZ+XC0kGso6FaT3vJ/N1EWY:Pu0c++OCvkGs9FaT3vFrY

Score
10/10
lokibotcollectiondiscoveryspywarestealertrojan

Malware Config

Extracted

Family

lokibot

C2

http://94.156.177.41/scc4/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      Shipping Docs.exe

    • Size

      933KB

    • MD5

      fa64179f49b88c7dcd8f0bd85e690950

    • SHA1

      052efded85afe180db38f693f9d5cd6b17555f5f

    • SHA256

      dcd7d5082c1baf73940d9c5216f2c50ce48dbb85a05065ae01b19d91e1db54a3

    • SHA512

      956409d19f93caffc7809ea3687b88b52af6bb0f0a76119f1d97c47f59984cdc4b913ebae6f97e6c64909ae22c0ee1d99418eb2a0fbf1684e86495326be3b501

    • SSDEEP

      24576:9u6J33O0c+JY5UZ+XC0kGso6FaT3vJ/N1EWY:Pu0c++OCvkGs9FaT3vFrY

    Score
    10/10
    lokibotcollectiondiscoveryspywarestealertrojan
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks