Overview

overview

10

Static

static

10

1780-69-0x...ry.exe

windows7_x64

1

1780-69-0x...ry.exe

windows10-2004_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1780-69-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • Sample

    220704-wxb82safal

  • MD5

    4920f639f947dbddce2a7e4b49956a36

  • SHA1

    1db2b6d9d45566fe601e12d1750824d8599cce0d

  • SHA256

    428e846e0853bc26f0c94b687469176a08afa9c790f62df8a9025a203a859d75

  • SHA512

    c658bb1f759cae80b7ce20bb1f04c5058e6984f757eb8944ce48781b2e54f49ff462fe6b8ba6de645f75c78ac25c13bb9c135c3ba8cddfc5b55e1f423f8972b6

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://sempersim.su/gi4/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      1780-69-0x0000000000400000-0x00000000004A2000-memory.dmp

    • Size

      648KB

    • MD5

      4920f639f947dbddce2a7e4b49956a36

    • SHA1

      1db2b6d9d45566fe601e12d1750824d8599cce0d

    • SHA256

      428e846e0853bc26f0c94b687469176a08afa9c790f62df8a9025a203a859d75

    • SHA512

      c658bb1f759cae80b7ce20bb1f04c5058e6984f757eb8944ce48781b2e54f49ff462fe6b8ba6de645f75c78ac25c13bb9c135c3ba8cddfc5b55e1f423f8972b6

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks