Overview

overview

10

Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    856-69-0x00000000004139DE-mapping.dmp

  • Size

    752KB

  • MD5

    c7388e5a32966e8c1dfd83475b666525

  • SHA1

    9e09f9aab36a8307090c04c9d11fcb4c12e29735

  • SHA256

    ad473a444e2bf9c4dac77f9e42433849279ffa3b4f919b3757cc0d5539316302

  • SHA512

    13e058b0eed5c42c3c4453fdb9cca62714cc6cf6462b968c4b8c7305c18c5cf3a3e199cb6a32d2753a43dd3ad9b25c940b1370ea8c6c6ef438df85adea8d1b44

  • SSDEEP

    3072:YSHIG6mQwGmfOQd8YhY0/EqUGjSHIG6mQwGmfOQd8YhY0/EQUGJ:Ycd6bUfFdXThUGcd6bUfFdXTjU4

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://sempersim.su/gk3/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 856-69-0x00000000004139DE-mapping.dmp