General
-
Target
308-68-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
Sample
221129-ha4swsdg87
-
MD5
68240323d6e9ce41c54b2701e551377c
-
SHA1
c79c52b674b3e82ea2a782f65e841a8dc8a349ff
-
SHA256
5bece0c5158d92cbc2a7c89face7681740c63472cad04b6dd70d812e249db6b4
-
SHA512
964e62fa8cec53f2409a3c3f2913878fa2585ed55e6277163afcffe2a1dafabd7b68ad02696e7dcc6706a499287895aa28313d9d41a93a80c647e8e6520a6f57
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Behavioral task
behavioral1
Sample
308-68-0x0000000000400000-0x00000000004A2000-memory.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
308-68-0x0000000000400000-0x00000000004A2000-memory.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
lokibot
http://sempersim.su/gm15/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
308-68-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
68240323d6e9ce41c54b2701e551377c
-
SHA1
c79c52b674b3e82ea2a782f65e841a8dc8a349ff
-
SHA256
5bece0c5158d92cbc2a7c89face7681740c63472cad04b6dd70d812e249db6b4
-
SHA512
964e62fa8cec53f2409a3c3f2913878fa2585ed55e6277163afcffe2a1dafabd7b68ad02696e7dcc6706a499287895aa28313d9d41a93a80c647e8e6520a6f57
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score3/10 -