Overview

overview

10

Static

static

10

1796-68-0x...ry.exe

windows7-x64

1

1796-68-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    1796-68-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    816fce314973dfa88883f1cbd51c3ad8

  • SHA1

    93323cf0c7866a7e337bece26807e6d2a09af5da

  • SHA256

    63c299013b59610a71a3b002ff96c40ef817b7dbb6ed3e50b5e23d6d04e2f955

  • SHA512

    19f237f51a8ea8aa3607ff31995ed901fd6fc5765ab29ae10b167b0896d9dd70f992ea504d96f8b43aeced6c8149dee33c584f7d8a856f15963c1ba761534b4a

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://sempersim.su/gl12/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1796-68-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections