General
-
Target
1076-65-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
Sample
221101-nmcg3abdg3
-
MD5
a823ee685c603f979aff6d41a2c450a1
-
SHA1
326ee6b1bdf83b798e17f86183e4b33fd760781a
-
SHA256
7828da017bc750c7f04dc74b73331e488dbd2cb61ad8ca467bd40968a68728ba
-
SHA512
7a6392361ecbc4fb39eca6d946c3f89a7bcb8dea00dc20c44078869bacccbb3066ed1ba3ef068e084991586c1544aca6b24058168e5f27a2f4ff35d2f7281033
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq1Izmd:nSHIG6mQwGmfOQd8YhY0/EgUG
Behavioral task
behavioral1
Sample
1076-65-0x0000000000400000-0x00000000004A2000-memory.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1076-65-0x0000000000400000-0x00000000004A2000-memory.exe
Resource
win10v2004-20220901-en
Malware Config
Extracted
lokibot
http://wexno.us/ho/sk/ironm.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
1076-65-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
a823ee685c603f979aff6d41a2c450a1
-
SHA1
326ee6b1bdf83b798e17f86183e4b33fd760781a
-
SHA256
7828da017bc750c7f04dc74b73331e488dbd2cb61ad8ca467bd40968a68728ba
-
SHA512
7a6392361ecbc4fb39eca6d946c3f89a7bcb8dea00dc20c44078869bacccbb3066ed1ba3ef068e084991586c1544aca6b24058168e5f27a2f4ff35d2f7281033
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq1Izmd:nSHIG6mQwGmfOQd8YhY0/EgUG
Score3/10 -