General

  • Target

    2796-958-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • Sample

    240301-drsdzabe7v

  • MD5

    38aa673cb38447e523c99693e52eefed

  • SHA1

    11fd5555b92f3380feb09738beea3be06225fce4

  • SHA256

    540f03d3ff73bf22ad0f527f40193dd80fda3207a503b116bdd1f5ce3ab7703e

  • SHA512

    b4628ae72975878da0dec29819d6a83ed4e8b0f59d15b6aeecb58cb26e42a0abe20e5b3e882a63927c4171214ec13be81fc2fb64897824776ac8f61dce6ff091

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq6Izmd:nSHIG6mQwGmfOQd8YhY0/EDUG

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://139.99.153.82/pp/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      2796-958-0x0000000000400000-0x00000000004A2000-memory.dmp

    • Size

      648KB

    • MD5

      38aa673cb38447e523c99693e52eefed

    • SHA1

      11fd5555b92f3380feb09738beea3be06225fce4

    • SHA256

      540f03d3ff73bf22ad0f527f40193dd80fda3207a503b116bdd1f5ce3ab7703e

    • SHA512

      b4628ae72975878da0dec29819d6a83ed4e8b0f59d15b6aeecb58cb26e42a0abe20e5b3e882a63927c4171214ec13be81fc2fb64897824776ac8f61dce6ff091

    • SSDEEP

      1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq6Izmd:nSHIG6mQwGmfOQd8YhY0/EDUG

    Score
    3/10

MITRE ATT&CK Matrix

Tasks