Lokibot,Lokibot.v2 | 425ef5b31a93

Classifications

Spyware Downloader Exploit

Threat Names

Lokibot Lokibot.v2 Mal/HTMLGen-A

Dynamic Analysis Report

Created on 2024-06-10T06:33:48+00:00

Purchase Order.doc

Word Document

Remarks (1/1)

Auto Reboot Triggered (0x02000004): The operating system was rebooted during the analysis because the sample installed a startup script, task or application for persistence.

General

5.06 KB total sent, 1.03 MB total received

2 ports: 443, 53

2 contacted IP addresses

5 URLs extracted

2 files downloaded

1 malicious hosts detected

DNS

63 Bytes sent, 95 Bytes received

1 queries for 1 domains

1 name server contacted

0 queries returned errors

HTTP/S

9.96 KB sent, 1.48 MB received

3 URLs, 1 contacted servers

3 sessions detected

Function Logfile

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting \"security.fileuri.strict_origin_policy\".

Before

After

WHOIS Domain Information

Screenshot

Domain Name
WHOIS Response