Overview

overview

10

Static

static

10

1236-78-0x...ry.exe

windows7_x64

1

1236-78-0x...ry.exe

windows10-2004_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1236-78-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • Sample

    220704-pm2mmahcaq

  • MD5

    cd5a0908b8e56f781bef443b1e9e8201

  • SHA1

    7a1fd5d0f92e7aadc3abddd820c58de75ea81804

  • SHA256

    7d4356e28040e725295af3393ad0b46e5503f1a52d952bf72d8ddb168141e512

  • SHA512

    63cf7be889f0849803e9edb29d399a2a4b5e7d023d013eed4dbbd9ac7f183c1e6ce16500c1c6a6f7642ab5d6d2aeafbde70468a42cd8f4b7335cdaf3d762d97f

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://sempersim.su/gi10/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      1236-78-0x0000000000400000-0x00000000004A2000-memory.dmp

    • Size

      648KB

    • MD5

      cd5a0908b8e56f781bef443b1e9e8201

    • SHA1

      7a1fd5d0f92e7aadc3abddd820c58de75ea81804

    • SHA256

      7d4356e28040e725295af3393ad0b46e5503f1a52d952bf72d8ddb168141e512

    • SHA512

      63cf7be889f0849803e9edb29d399a2a4b5e7d023d013eed4dbbd9ac7f183c1e6ce16500c1c6a6f7642ab5d6d2aeafbde70468a42cd8f4b7335cdaf3d762d97f

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks