General

  • Target

    308-68-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • Sample

    221129-ha4swsdg87

  • MD5

    68240323d6e9ce41c54b2701e551377c

  • SHA1

    c79c52b674b3e82ea2a782f65e841a8dc8a349ff

  • SHA256

    5bece0c5158d92cbc2a7c89face7681740c63472cad04b6dd70d812e249db6b4

  • SHA512

    964e62fa8cec53f2409a3c3f2913878fa2585ed55e6277163afcffe2a1dafabd7b68ad02696e7dcc6706a499287895aa28313d9d41a93a80c647e8e6520a6f57

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://sempersim.su/gm15/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      308-68-0x0000000000400000-0x00000000004A2000-memory.dmp

    • Size

      648KB

    • MD5

      68240323d6e9ce41c54b2701e551377c

    • SHA1

      c79c52b674b3e82ea2a782f65e841a8dc8a349ff

    • SHA256

      5bece0c5158d92cbc2a7c89face7681740c63472cad04b6dd70d812e249db6b4

    • SHA512

      964e62fa8cec53f2409a3c3f2913878fa2585ed55e6277163afcffe2a1dafabd7b68ad02696e7dcc6706a499287895aa28313d9d41a93a80c647e8e6520a6f57

    • SSDEEP

      1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

    Score
    3/10

MITRE ATT&CK Matrix

Tasks