Overview

overview

10

Static

static

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    956-69-0x00000000004139DE-mapping.dmp

  • Size

    752KB

  • MD5

    7a87a38fa22b3c464c00fb0f55656d76

  • SHA1

    418c29be45d65239e99578bff0800d31d41af84a

  • SHA256

    361fa77f2a133422c86dc978a630d443e9ce2ce9809c589343396f0eb3692673

  • SHA512

    9861d3f4ed90685acf77a1107353f695dee3779c44088207680482540e40e636d4d4cd9f8bda89fd728caf2af677277d63cb1b4d05c006d94195d380fd8bd0aa

  • SSDEEP

    3072:oSHIG6mQwGmfOQd8YhY0/EqUGySHIG6mQwGmfOQd8YhY0/EgUGj:ocd6bUfFdXThUrcd6bUfFdXT/UC

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://sempersim.su/gf20/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 956-69-0x00000000004139DE-mapping.dmp