Overview

overview

10

Static

static

10

1100-68-0x...ry.exe

windows7-x64

1

1100-68-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1100-68-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    f4a708b68ae009df8c4dbda34dda0be7

  • SHA1

    053fa5a0985f0793ec43859082416f5d77dc28e0

  • SHA256

    2b39cf3ab0b7cb4e377a65a583df1c97eee46686168a9b014a3269b88b03ae09

  • SHA512

    06b90c88d8a7392f9ba2e09a0056c0f8062bf421652d913bb8ded3d526f63499cd9f9de480f9b180ded47d7306354deee773a99c76eb38659b41f2872d424394

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://162.0.223.13/?08fequikdahgueq78uc

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1100-68-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections