Overview

overview

10

Static

static

10

276-67-0x0...ry.exe

windows7-x64

1

276-67-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    276-67-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    a0bfafbf54b1047a71492ff7f579195a

  • SHA1

    3d015e4dfb276eadd6c8d9b421be978a2c67ae2b

  • SHA256

    c8911038b76de284bc79259f5addc18e8cdfbc49d29b9254dff24f539f77f39b

  • SHA512

    353f1c9d9c68eaf54fd84b1ad891f5b8a9e22e7bbd5e5e9b13a616fa7f9e5c309146db4264f810c1522c1d9ca2cbbc1fc0b4ab2ce9cef8d3403c8d7e33539c99

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqAIzmd:nSHIG6mQwGmfOQd8YhY0/EhUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://chilok.us/EKENES/all/allforone.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 276-67-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections