Overview

overview

10

Static

static

10

692-80-0x0...ry.exe

windows7-x64

1

692-80-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    692-80-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    b01cd03612c84ac0ad6d31be8746c266

  • SHA1

    66a045cbdc171e12f81839e00113f15e19fd419d

  • SHA256

    ff1dcc3196eee0a0e42f87d48d82ff119864a546823b9b911b8186ec275f3392

  • SHA512

    36dd326fc3b91d726e6025a448167df52efc72537e7ede91e4a1269530c5879cd285598c935e2eedc5a2ffe531cbd96e95f6e204c375b8176e738ef45a08ac03

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqQIzmd:nSHIG6mQwGmfOQd8YhY0/EdUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://208.67.105.162/drostov/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 692-80-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections