General

  • Target

    1580-66-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • Sample

    230207-ydm8baef6y

  • MD5

    2aa750024c665159c0643c34986af491

  • SHA1

    d7e93999195f0c2ebc6ca5ed30ba6913921f613d

  • SHA256

    f19b37a0b9f1bcd0be91ebf40321dd3eb257d7375bf1031b49017a57d09a6ffd

  • SHA512

    4b95ff9521d3b69691711fa6fb0d9794b707dd69c0e834d0fe5fe1b115a845cfb341ea9adf62d2777275ff36815fa672d2de4f640b0634dbda20bb3ec0ef59b3

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq7Izmd:nSHIG6mQwGmfOQd8YhY0/E+UG

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

https://sempersim.su/ha12/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      1580-66-0x0000000000400000-0x00000000004A2000-memory.dmp

    • Size

      648KB

    • MD5

      2aa750024c665159c0643c34986af491

    • SHA1

      d7e93999195f0c2ebc6ca5ed30ba6913921f613d

    • SHA256

      f19b37a0b9f1bcd0be91ebf40321dd3eb257d7375bf1031b49017a57d09a6ffd

    • SHA512

      4b95ff9521d3b69691711fa6fb0d9794b707dd69c0e834d0fe5fe1b115a845cfb341ea9adf62d2777275ff36815fa672d2de4f640b0634dbda20bb3ec0ef59b3

    • SSDEEP

      1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq7Izmd:nSHIG6mQwGmfOQd8YhY0/E+UG

    Score
    3/10

MITRE ATT&CK Matrix

Tasks