General

  • Target

    2948-16-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • Sample

    240806-nnrclssalc

  • MD5

    aac65bfe6d480622fa924c2ad4b54e0c

  • SHA1

    1e30682b824c7a30aae8ff11c3a65fcc5d111882

  • SHA256

    a8a7821c83abd4a046b1bf2d970b1a85bd9609f5989ff0cfcec40fc72625892e

  • SHA512

    8f0fcb0bc25fca1ea9e1c23a1c7d30849a3f7559cd308ab23448567baaa637484d5fb2fea9a063f060f179668aae888f60aa4a0508b839416798afe20f755ed3

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqyIzmd:nSHIG6mQwGmfOQd8YhY0/EDUG

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://45.61.137.215/index.php/t?id=090

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      2948-16-0x0000000000400000-0x00000000004A2000-memory.dmp

    • Size

      648KB

    • MD5

      aac65bfe6d480622fa924c2ad4b54e0c

    • SHA1

      1e30682b824c7a30aae8ff11c3a65fcc5d111882

    • SHA256

      a8a7821c83abd4a046b1bf2d970b1a85bd9609f5989ff0cfcec40fc72625892e

    • SHA512

      8f0fcb0bc25fca1ea9e1c23a1c7d30849a3f7559cd308ab23448567baaa637484d5fb2fea9a063f060f179668aae888f60aa4a0508b839416798afe20f755ed3

    • SSDEEP

      1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqyIzmd:nSHIG6mQwGmfOQd8YhY0/EDUG

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks