General

  • Target

    1520-67-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • Sample

    220913-qfxkrsbdhk

  • MD5

    1dca82b770877246313ef766f3486c96

  • SHA1

    a6ee2c73d50a456d552ce2459a126326f59ce901

  • SHA256

    a7889aae3b543fb63b58dd2b0acfc9d35464a8ba92258427e792f57ed31ec952

  • SHA512

    272d5d1c7184888024f12f52dc2f3fa92762811813c96192b469f930106cb1b2d2fe7410e41192d01b1741f9a55de72fe692ae35a0c16e737a4b731b2704351f

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://sempersim.su/gk12/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      1520-67-0x0000000000400000-0x00000000004A2000-memory.dmp

    • Size

      648KB

    • MD5

      1dca82b770877246313ef766f3486c96

    • SHA1

      a6ee2c73d50a456d552ce2459a126326f59ce901

    • SHA256

      a7889aae3b543fb63b58dd2b0acfc9d35464a8ba92258427e792f57ed31ec952

    • SHA512

      272d5d1c7184888024f12f52dc2f3fa92762811813c96192b469f930106cb1b2d2fe7410e41192d01b1741f9a55de72fe692ae35a0c16e737a4b731b2704351f

    • SSDEEP

      1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

    Score
    3/10

MITRE ATT&CK Matrix

Tasks