Overview

overview

10

Static

static

10

1016-58-0x...ry.exe

windows7-x64

1

1016-58-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1016-58-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    681c8ff56d10ed8c90146a4eff0be5bb

  • SHA1

    7e58b5a977a92982a756cb2b726d7bb0acdf9d0a

  • SHA256

    873e3975f99f1164d7461dc574d6455ea9dc616d9c39b1b9ec16bd270e76db53

  • SHA512

    9de880521abeec3daa2e75a792d7e87d05605232350f9d9d0223226753146210f4dacc89d2068a0772f227c260fc13baa725e175ffba8215d1248d74f661105f

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqcIzmd:nSHIG6mQwGmfOQd8YhY0/ExUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://jackmoynehan.com/zbuka/Panel/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1016-58-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections