General
-
Target
1980-66-0x00000000003D0000-0x00000000003EB000-memory.dmp
-
Size
108KB
-
MD5
4a793db76a177d56b4bc17f685ada45b
-
SHA1
35626813b57b6a6524377f8249b38ab4885751ce
-
SHA256
0927c009d08be138d2961e39c053da9c3efa1a1bb4ab4aa61df1661b24b286f9
-
SHA512
b3086f5406bbf44608e6b1111e093a61a395f3b51f55fcb52c582ecab5833f32033f3661d7ab393fa515da178c7cacf551a36998e03af1ae4c1b5a038bad4013
-
SSDEEP
1536:wl5D3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:SDMSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://sempersim.su/gm2/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
Files
-
1980-66-0x00000000003D0000-0x00000000003EB000-memory.dmp