Overview

overview

10

Static

static

10

2024-69-0x...ry.exe

windows7_x64

1

2024-69-0x...ry.exe

windows10-2004_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-69-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    24ee6f69393e971532c80758b2bbe375

  • SHA1

    29a84cf5df7019cd4b4ea9bf88dfa3b0f00223a6

  • SHA256

    498098421c1fe8cb013dca212c495b0734b63f078b7807fe9cf4ee1fc1149963

  • SHA512

    38bdfae719de503daec411f26f3ecbf4f397ee7a6a61ffced1ad9dc8b3fc849a7a59c6af33ac5b01b3d56a6a53785650ddfe3bd668b329f03c3a107cf55f928b

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://45.133.1.20/rostov2/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 2024-69-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections