Overview

overview

10

Static

static

10

948-68-0x0...ry.exe

windows7-x64

1

948-68-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    948-68-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    3bee3a07837076836c3e7700275898ed

  • SHA1

    0f62422122f1c3cbb984c80e0d48b9f97309530b

  • SHA256

    0031b1a33e517066ad9a1bd21bc768669ed4cfb29c78ab6e36cd0f1476fa9154

  • SHA512

    7a9049e9a1fc8bc1bfd053827864eb0b5718c0287f211ab693412a99edb181da3fa1a2d532bb6e6ebada77893660f30e59044ac07af7da2cbf9e3e4a54acb22b

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://sempersim.su/gl20/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 948-68-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections