General

  • Target

    2620-13-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • Sample

    240522-xgvacsce9x

  • MD5

    45a1a53497bc5e2a0ef50aa5c7adf88c

  • SHA1

    38ab5f760d6ea80c6f5905b8e9b16926ff162e14

  • SHA256

    c669ce6e3765a8b0bbe0ba45f79ae54ff368062372d4b82b42193536ff2aed93

  • SHA512

    657c938fc5bae43f64a3ef70a38d8032a48f0b5636ca92caa85093f2cf22e6a3f03e09c6905e2b13571173f99cee66f01efc9d8fabe829f12ec289b454dc2d69

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://45.61.137.215/index.php/t?id=090

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      2620-13-0x0000000000400000-0x00000000004A2000-memory.dmp

    • Size

      648KB

    • MD5

      45a1a53497bc5e2a0ef50aa5c7adf88c

    • SHA1

      38ab5f760d6ea80c6f5905b8e9b16926ff162e14

    • SHA256

      c669ce6e3765a8b0bbe0ba45f79ae54ff368062372d4b82b42193536ff2aed93

    • SHA512

      657c938fc5bae43f64a3ef70a38d8032a48f0b5636ca92caa85093f2cf22e6a3f03e09c6905e2b13571173f99cee66f01efc9d8fabe829f12ec289b454dc2d69

    • SSDEEP

      1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

    Score
    3/10

MITRE ATT&CK Matrix

Tasks