General
-
Target
1940-81-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
Sample
230123-xmd6bseg77
-
MD5
01b0028073b887760d84936fc865f6bb
-
SHA1
d125791bffb6a530a5c932f1cabdd004e0e9f0f5
-
SHA256
9d3f3222358ba38f14ef4eaeb0b1abdab592ecb75bac0b5f21fa7fc39847580b
-
SHA512
09d1662b313be989e4c9672ef32c9d73ef3d9825c843d77262604bd3a2a84b96e8b034daabd11c41fc7db211bb3e789054d7cefab96ab57108ed5f2986d7d016
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Behavioral task
behavioral1
Sample
1940-81-0x0000000000400000-0x00000000004A2000-memory.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1940-81-0x0000000000400000-0x00000000004A2000-memory.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
lokibot
http://171.22.30.147/kelly/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
1940-81-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
01b0028073b887760d84936fc865f6bb
-
SHA1
d125791bffb6a530a5c932f1cabdd004e0e9f0f5
-
SHA256
9d3f3222358ba38f14ef4eaeb0b1abdab592ecb75bac0b5f21fa7fc39847580b
-
SHA512
09d1662b313be989e4c9672ef32c9d73ef3d9825c843d77262604bd3a2a84b96e8b034daabd11c41fc7db211bb3e789054d7cefab96ab57108ed5f2986d7d016
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score3/10 -