General
-
Target
2064-53-0x00000000000C0000-0x0000000000162000-memory.dmp
-
Size
648KB
-
Sample
240307-wdp1sshc52
-
MD5
6d8c3030548e2f58740b4ee114a89490
-
SHA1
25405fece11e757bbb91e2d377a6701b20d380cd
-
SHA256
d204a3b7115abfc7fbb67df70a3297148a583bf90885235645c905b606623f16
-
SHA512
0e268708c30e48554fbe1df2eed22ef62e3a7f0afe002d82233b2103faed7c21783d07b650a260533404cd1d065a3e5d555a3a36a5ad998c9a75730f7a7b63b6
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Behavioral task
behavioral1
Sample
2064-53-0x00000000000C0000-0x0000000000162000-memory.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2064-53-0x00000000000C0000-0x0000000000162000-memory.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
lokibot
https://sempersim.su/c12/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
2064-53-0x00000000000C0000-0x0000000000162000-memory.dmp
-
Size
648KB
-
MD5
6d8c3030548e2f58740b4ee114a89490
-
SHA1
25405fece11e757bbb91e2d377a6701b20d380cd
-
SHA256
d204a3b7115abfc7fbb67df70a3297148a583bf90885235645c905b606623f16
-
SHA512
0e268708c30e48554fbe1df2eed22ef62e3a7f0afe002d82233b2103faed7c21783d07b650a260533404cd1d065a3e5d555a3a36a5ad998c9a75730f7a7b63b6
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score3/10 -