General
-
Target
2796-958-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
Sample
240301-drsdzabe7v
-
MD5
38aa673cb38447e523c99693e52eefed
-
SHA1
11fd5555b92f3380feb09738beea3be06225fce4
-
SHA256
540f03d3ff73bf22ad0f527f40193dd80fda3207a503b116bdd1f5ce3ab7703e
-
SHA512
b4628ae72975878da0dec29819d6a83ed4e8b0f59d15b6aeecb58cb26e42a0abe20e5b3e882a63927c4171214ec13be81fc2fb64897824776ac8f61dce6ff091
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq6Izmd:nSHIG6mQwGmfOQd8YhY0/EDUG
Behavioral task
behavioral1
Sample
2796-958-0x0000000000400000-0x00000000004A2000-memory.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2796-958-0x0000000000400000-0x00000000004A2000-memory.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
lokibot
http://139.99.153.82/pp/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
2796-958-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
38aa673cb38447e523c99693e52eefed
-
SHA1
11fd5555b92f3380feb09738beea3be06225fce4
-
SHA256
540f03d3ff73bf22ad0f527f40193dd80fda3207a503b116bdd1f5ce3ab7703e
-
SHA512
b4628ae72975878da0dec29819d6a83ed4e8b0f59d15b6aeecb58cb26e42a0abe20e5b3e882a63927c4171214ec13be81fc2fb64897824776ac8f61dce6ff091
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq6Izmd:nSHIG6mQwGmfOQd8YhY0/EDUG
Score3/10 -