General
-
Target
2104-989-0x0000000000400000-0x0000000001462000-memory.dmp
-
Size
16.4MB
-
Sample
240705-qxm3na1hpe
-
MD5
92eaafb411aa956e507efccf3571ec33
-
SHA1
12103aff242b673b31db18b7580cc176cd91bd5b
-
SHA256
c8b399132e66cdcf6adac66edef0b9ffa64f3d7f67676974f8f2ebb0727da83d
-
SHA512
8b6e4aed8f76a018952da78ff85794be31de01a6e122e259efd9ae8c127eb34e64f57f9aa99cbac20c40f5f5812609b0ba97a804403de49b6a85eb6db7b7f76c
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqwIzmd:nSHIG6mQwGmfOQd8YhY0/ElUG
Behavioral task
behavioral1
Sample
2104-989-0x0000000000400000-0x0000000001462000-memory.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2104-989-0x0000000000400000-0x0000000001462000-memory.exe
Resource
win10v2004-20240704-en
Malware Config
Extracted
lokibot
http://ransomproducts.top/cj1/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
2104-989-0x0000000000400000-0x0000000001462000-memory.dmp
-
Size
16.4MB
-
MD5
92eaafb411aa956e507efccf3571ec33
-
SHA1
12103aff242b673b31db18b7580cc176cd91bd5b
-
SHA256
c8b399132e66cdcf6adac66edef0b9ffa64f3d7f67676974f8f2ebb0727da83d
-
SHA512
8b6e4aed8f76a018952da78ff85794be31de01a6e122e259efd9ae8c127eb34e64f57f9aa99cbac20c40f5f5812609b0ba97a804403de49b6a85eb6db7b7f76c
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqwIzmd:nSHIG6mQwGmfOQd8YhY0/ElUG
Score3/10 -