Overview

overview

10

Static

static

10

1776-66-0x...ry.exe

windows7-x64

1

1776-66-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1776-66-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    9bd718940de9e045cff490cf8721de80

  • SHA1

    e88d225b6124af5214048a4884cc1632ca0d00cd

  • SHA256

    8678f93cd3981e901d234eac29e7eb4cb8efa4419d26a1dcb9d681992cff0fc3

  • SHA512

    8a074c8fd7ee1458ef1d7c41afed7e19364ee42b48627c3ea022309becfeb6dbe0a854d1c8b5308bfecece341204de2dc508416de7ccdd635d108af3a81e39fc

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqXIzmd:nSHIG6mQwGmfOQd8YhY0/E+UG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://208.67.105.161/starmoney/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1776-66-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections