General

  • Target

    844-69-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • Sample

    240302-kvqswacb89

  • MD5

    46f9e288824d3a2c8e098b1ddbd20b5d

  • SHA1

    35dd3632e788ddc84f58b8d7a8e942e76e41e913

  • SHA256

    60671fef09107343e31bb133ed30c69cbdd5aa18af4964337353e7fceeac0947

  • SHA512

    1ee52c9efc60a76bb05f6f78bb6f47471d35d17bd4a1847bd0fea47b2ef94218d56edb7841ab6f9a99689d9b70b99f1b876960a4071dba15fcba718e61c732a5

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://185.246.220.85/bally/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      844-69-0x0000000000400000-0x00000000004A2000-memory.dmp

    • Size

      648KB

    • MD5

      46f9e288824d3a2c8e098b1ddbd20b5d

    • SHA1

      35dd3632e788ddc84f58b8d7a8e942e76e41e913

    • SHA256

      60671fef09107343e31bb133ed30c69cbdd5aa18af4964337353e7fceeac0947

    • SHA512

      1ee52c9efc60a76bb05f6f78bb6f47471d35d17bd4a1847bd0fea47b2ef94218d56edb7841ab6f9a99689d9b70b99f1b876960a4071dba15fcba718e61c732a5

    • SSDEEP

      1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

    Score
    3/10

MITRE ATT&CK Matrix

Tasks