General
-
Target
600-67-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
Sample
240302-ng89vada62
-
MD5
040d42d261e60b04d0f5002ca7e5ac4e
-
SHA1
8753543fb274f10083ce50e98e6922177c7716d9
-
SHA256
8e90061dff6a500f7ee529ab132860de09adf0daa711cae529a487a777405bd5
-
SHA512
cb04e98f37918de6e941816a8a01649feb1ed239704a4c391bc3959c6ff876b9ce2c8881cafcfafda4411514c8bfce136f9d3b91e3b4ef0b1ba17e9088cb976f
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Behavioral task
behavioral1
Sample
600-67-0x0000000000400000-0x00000000004A2000-memory.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
600-67-0x0000000000400000-0x00000000004A2000-memory.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
lokibot
http://185.246.220.85/small/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
600-67-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
040d42d261e60b04d0f5002ca7e5ac4e
-
SHA1
8753543fb274f10083ce50e98e6922177c7716d9
-
SHA256
8e90061dff6a500f7ee529ab132860de09adf0daa711cae529a487a777405bd5
-
SHA512
cb04e98f37918de6e941816a8a01649feb1ed239704a4c391bc3959c6ff876b9ce2c8881cafcfafda4411514c8bfce136f9d3b91e3b4ef0b1ba17e9088cb976f
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score3/10 -