General
-
Target
1756-61-0x0000000000400000-0x0000000000523000-memory.dmp
-
Size
1.1MB
-
Sample
230130-c39a7aea95
-
MD5
d6c22b1146e59a843b149a515bacdaa7
-
SHA1
6138e5af498323317eb1dc62b113d80405760288
-
SHA256
b9185f7f767622b358195346e9cdd988461297758202cb685c9456cdd4e9e4e5
-
SHA512
071b162d5ce20b5f5becfd3f9978a3b6c0a8870c9f94de9dc3cbaf7859e5bdebf7110b6ec7968c505d2d36e09d775d52b620d2b5c6de2f3508d16c2516986045
-
SSDEEP
24576:nwXHzoKBgnxxJeVPRCmdzmkXi7J2NCRx2qpS40+9lds0Oz0IQOrkZvVLApyEG/ay:woyBkWA
Behavioral task
behavioral1
Sample
1756-61-0x0000000000400000-0x0000000000523000-memory.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1756-61-0x0000000000400000-0x0000000000523000-memory.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
lokibot
http://31.220.2.120/~danielwa/secure/dash/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
1756-61-0x0000000000400000-0x0000000000523000-memory.dmp
-
Size
1.1MB
-
MD5
d6c22b1146e59a843b149a515bacdaa7
-
SHA1
6138e5af498323317eb1dc62b113d80405760288
-
SHA256
b9185f7f767622b358195346e9cdd988461297758202cb685c9456cdd4e9e4e5
-
SHA512
071b162d5ce20b5f5becfd3f9978a3b6c0a8870c9f94de9dc3cbaf7859e5bdebf7110b6ec7968c505d2d36e09d775d52b620d2b5c6de2f3508d16c2516986045
-
SSDEEP
24576:nwXHzoKBgnxxJeVPRCmdzmkXi7J2NCRx2qpS40+9lds0Oz0IQOrkZvVLApyEG/ay:woyBkWA
Score3/10 -