General

  • Target

    2580-31-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • Sample

    240516-taaetscc42

  • MD5

    d92755cc5def0f084810e5a540624aac

  • SHA1

    c49786d2b10e67e0c3b0e2561f701a3dabd5b147

  • SHA256

    6461a9175988063c952749c1854129dd453eca66bb33930a379d0e7ee1fe3ea7

  • SHA512

    85497128fa5facf9e7723ecba8e0828f0834b2143fb7e0feb795adb57843d8e94c6b1ac9cf186894f1d54a44e2ff8c469e76c35d8a7d488d81c0145e9086af96

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqNIzmd:nSHIG6mQwGmfOQd8YhY0/EsUG

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://sempersim.su/d1/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      2580-31-0x0000000000400000-0x00000000004A2000-memory.dmp

    • Size

      648KB

    • MD5

      d92755cc5def0f084810e5a540624aac

    • SHA1

      c49786d2b10e67e0c3b0e2561f701a3dabd5b147

    • SHA256

      6461a9175988063c952749c1854129dd453eca66bb33930a379d0e7ee1fe3ea7

    • SHA512

      85497128fa5facf9e7723ecba8e0828f0834b2143fb7e0feb795adb57843d8e94c6b1ac9cf186894f1d54a44e2ff8c469e76c35d8a7d488d81c0145e9086af96

    • SSDEEP

      1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqNIzmd:nSHIG6mQwGmfOQd8YhY0/EsUG

    Score
    3/10

MITRE ATT&CK Matrix

Tasks