General

  • Target

    1968-69-0x00000000004139DE-mapping.dmp

  • Size

    752KB

  • MD5

    8bbf98811896196fe683f74ab251a799

  • SHA1

    cba514829dd5287f261505d732f1a0ca3a42cae4

  • SHA256

    1f4cc408c23ca1dab0334f5b4cce9c999b23311f82c30f7fbbd884d2016b59c1

  • SHA512

    9df2c0642df1a684029997378d95ff3f74bab7cc93b269740b003ade11d85a43d512532d7c4e157368628cb5f7e84ff966c6282b0892c106375b0a79dc6489ea

  • SSDEEP

    3072:oSHIG6mQwGmfOQd8YhY0/EqUGDSHIG6mQwGmfOQd8YhY0/ENUGq:ocd6bUfFdXThUScd6bUfFdXT6UD

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://sempersim.su/gl2/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1968-69-0x00000000004139DE-mapping.dmp