Overview

overview

10

Static

static

10

856-64-0x0...ry.exe

windows7-x64

1

856-64-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    856-64-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    3c5888649174d91d802890dfe396f680

  • SHA1

    d2e625281806e64da081b1f7df44f2ec8ff8b4f8

  • SHA256

    ad34cd1f631c67599602b547889e466cff3121fee413fb024de5b4d63750b27e

  • SHA512

    a2e294a9b3c32ffec95d5ab5cdd7955d52354960bcb918491b5c8f39317803961b265c493fc8ed8917b5a5f4267f017910547ce306e619bad003aad80962114a

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://195.154.34.135/~komiyoru/komiyo/Panel/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 856-64-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections