General

  • Target
    jaffacakes118_Trojan-Spy.Win32.Zbot.zscv.21ddda0468527bcdba961787f7cfae6e
  • Size 994KB
  • Sample261016-dmay5agw2p
  • SHA256 bf3e3d4ffd813baab964bcb8777f5cbb74e554f0de85e846898ed969be795963
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • lokibot

C2
  • http://outlooks.duckdns.org:8900/admin/fre.php

  • http://kbfvzoboss.bid/alien/fre.php

  • http://alphastand.trade/alien/fre.php

  • http://alphastand.win/alien/fre.php

  • http://alphastand.top/alien/fre.php

Targets

    • Target
      jaffacakes118_Trojan-Spy.Win32.Zbot.zscv.21ddda0468527bcdba961787f7cfae6e
    • Size 994KB
    • SHA256 bf3e3d4ffd813baab964bcb8777f5cbb74e554f0de85e846898ed969be795963
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks