#lokibot

#lokibot (believe it or not) at:
https://ballotlinllc\\.top/kellymnb/ENCRYPTED.ps1

c2: http://91.92.243.\254/kelly/five/fre.php

65312b1b16f7928cbd0fa79bc12fe75dac2f610d13a54848a8b6f52d035f870d on the ps1

Analysis Credit Note Sept 25.exe (MD5: A7910C4F6ACC99745A035E85DD1B065E) No threats detected - Interactive analysis ANY.RUN Interactive malware hunting service. Live testing of most type of threats in any environments. No installation and no waiting necessary.

Some fresh (brace yourself...) #lokibot:

app.any.run/tasks/efb5efa2-f574-40e0...

a c2:
http://kbfvzoboss\\.bid/alien/fre.php"

Analysis Payment receipt PO 1437 1_ Payment receipt PO #1437 2.exe (MD5: 5A4FC3780CFC0527D12D8BB5134A81F5) Malicious activity - Interactive analysis ANY.RUN Interactive malware hunting service. Live testing of most type of threats in any environments. No installation and no waiting necessary.

Some fresh (and I can't believe I'm typing this) #lokibot:

app.any.run/tasks/054d7a...

c2: http:// touxzw\.ir/fix/five/fre.php

Analysis Payment receipt PO 1437 1_ Payment receipt PO #1437 2.exe (MD5: 5A4FC3780CFC0527D12D8BB5134A81F5) Malicious activity - Interactive analysis ANY.RUN Interactive malware hunting service. Live testing of most type of threats in any environments. No installation and no waiting necessary.

Some fresh (and I can't believe I'm typing this) #lokibot:

app.any.run/tasks/054d7af5-64fc-4791...

c2: http:// touxzw\\.ir/fix/five/fre.php