Overview

overview

10

Static

static

10

1236-78-0x...ry.exe

windows7_x64

1

1236-78-0x...ry.exe

windows10-2004_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1236-78-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    cd5a0908b8e56f781bef443b1e9e8201

  • SHA1

    7a1fd5d0f92e7aadc3abddd820c58de75ea81804

  • SHA256

    7d4356e28040e725295af3393ad0b46e5503f1a52d952bf72d8ddb168141e512

  • SHA512

    63cf7be889f0849803e9edb29d399a2a4b5e7d023d013eed4dbbd9ac7f183c1e6ce16500c1c6a6f7642ab5d6d2aeafbde70468a42cd8f4b7335cdaf3d762d97f

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://sempersim.su/gi10/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1236-78-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections