General

  • Target

    2076-134-0x0000000000400000-0x00000000004A3000-memory.dmp

  • Size

    652KB

  • MD5

    4f35d0e75324ca613d47b19e6c2f0045

  • SHA1

    7363702386f8b0c596655eb42bd262109a257856

  • SHA256

    939a5a79d1b14d8c08933411cc1f6ce2c6e4317a92b42a8a70eb90de546363f9

  • SHA512

    fdf1fe591d98f5139df591a389c20de3a39c8e627937ff726acd82ead928b8914b8ef926dbe5693512367c471aa86c7acbd64df7795d305c06ebc30a44073b9e

  • SSDEEP

    1536:kzvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmdd:/SHIG6mQwGmfOQd8YhY0/EqUGd

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://sempersim.su/gi5/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 2076-134-0x0000000000400000-0x00000000004A3000-memory.dmp
    .exe windows x86


    Headers

    Sections