General

  • Target

    2032-70-0x00000000004139DE-mapping.dmp

  • Size

    752KB

  • MD5

    bf4cc2e34e570536d67409691cb6c42b

  • SHA1

    5210d4f7025a88c048db71bb66dbc239e01d3391

  • SHA256

    dc97111f867d63ccc1659e494b3a47ff665baef672f1a5bc557a94ab86ee13d1

  • SHA512

    4400e3689a266c95f0af4e2cd051300f7062c1064f678dac2060811277f6ba0f50f48509a51bcfd5f6965d27a2a9f05cb80dcd5c11e7fad08af549fe547eb790

  • SSDEEP

    3072:MSHIG6mQwGmfOQd8YhY0/EqUGqSHIG6mQwGmfOQd8YhY0/ENUGX:Mcd6bUfFdXThUbcd6bUfFdXT6U2

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://sempersim.su/gk18/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 2032-70-0x00000000004139DE-mapping.dmp