Overview

overview

10

Static

static

10

1780-69-0x...ry.exe

windows7_x64

1

1780-69-0x...ry.exe

windows10-2004_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1780-69-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    4920f639f947dbddce2a7e4b49956a36

  • SHA1

    1db2b6d9d45566fe601e12d1750824d8599cce0d

  • SHA256

    428e846e0853bc26f0c94b687469176a08afa9c790f62df8a9025a203a859d75

  • SHA512

    c658bb1f759cae80b7ce20bb1f04c5058e6984f757eb8944ce48781b2e54f49ff462fe6b8ba6de645f75c78ac25c13bb9c135c3ba8cddfc5b55e1f423f8972b6

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://sempersim.su/gi4/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1780-69-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections