Overview

overview

10

Static

static

10

4164-171-0...ry.exe

windows7-x64

1

4164-171-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4164-171-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    5dfac00da7e5f947a9b4fd93cf3e0a6b

  • SHA1

    f04a237e2bb63d5b296deed83df1fc3433af32cf

  • SHA256

    341ebe8c9d417aa027ad2cb055815968ef8b9e4bc0ae9401796322009ba7a6f1

  • SHA512

    fd4cfd35d5840f5249c50433525c32aa7db1779a604321a4909304dcc94ae212b959bd164c386f16056f2bb836b36e0061901966f69b0c74b9b70e5fdd5e8f34

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://192.64.118.167/profile.php?id=6iMMKJHCU15sObupIn6Ll6LlnrEG0OS67FTRoBujDALrMfRvD

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 4164-171-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections