Overview

overview

10

Static

static

10

1836-57-0x...ry.exe

windows7_x64

1

1836-57-0x...ry.exe

windows10-2004_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1836-57-0x0000000000400000-0x0000000000635000-memory.dmp

  • Size

    2.2MB

  • MD5

    c7c5025d097cab2403a19e980539e315

  • SHA1

    045b28746d757135b848f4069bcec0824d2868f4

  • SHA256

    8b118af6bd76a92a80f72fa0e8979bb758e79c6c3dfc837d3dd12c3a2605bc42

  • SHA512

    6cb013ffa304fa0e4f31a797eed69158e46bed51354bdf84531bb602f20e870797cdb77af7ee86eaee71763bfb953fce97f8e30fb952d5ea51580dbef37efb7c

  • SSDEEP

    3072:nSHIG6mQwGmfOQd8YhY0/E9UGVsJlCD57sxkgaBChcpZa9uD6Vdyhk:ncd6bUfFdXTaUisu2igafwVf

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://198.187.30.47/p.php?id=17414649419491256

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1836-57-0x0000000000400000-0x0000000000635000-memory.dmp
    .exe windows x86


    Headers

    Sections