Overview

overview

10

Static

static

10

1520-67-0x...ry.exe

windows7-x64

1

1520-67-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1520-67-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    1dca82b770877246313ef766f3486c96

  • SHA1

    a6ee2c73d50a456d552ce2459a126326f59ce901

  • SHA256

    a7889aae3b543fb63b58dd2b0acfc9d35464a8ba92258427e792f57ed31ec952

  • SHA512

    272d5d1c7184888024f12f52dc2f3fa92762811813c96192b469f930106cb1b2d2fe7410e41192d01b1741f9a55de72fe692ae35a0c16e737a4b731b2704351f

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://sempersim.su/gk12/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1520-67-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections