General
-
Target
2032-70-0x00000000004139DE-mapping.dmp
-
Size
752KB
-
MD5
bf4cc2e34e570536d67409691cb6c42b
-
SHA1
5210d4f7025a88c048db71bb66dbc239e01d3391
-
SHA256
dc97111f867d63ccc1659e494b3a47ff665baef672f1a5bc557a94ab86ee13d1
-
SHA512
4400e3689a266c95f0af4e2cd051300f7062c1064f678dac2060811277f6ba0f50f48509a51bcfd5f6965d27a2a9f05cb80dcd5c11e7fad08af549fe547eb790
-
SSDEEP
3072:MSHIG6mQwGmfOQd8YhY0/EqUGqSHIG6mQwGmfOQd8YhY0/ENUGX:Mcd6bUfFdXThUbcd6bUfFdXT6U2
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://sempersim.su/gk18/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
Files
-
2032-70-0x00000000004139DE-mapping.dmp