Overview

overview

10

Static

static

10

2020-68-0x...ry.exe

windows7-x64

1

2020-68-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2020-68-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    ba310c741918da3a9dbdd8ab53901b27

  • SHA1

    f848ff9dce1d11dc4abdb798236dca9f6830fe4f

  • SHA256

    4b9da01a5239490adb1278ad2b2270310c1fe1db6a9995b2f801f10c2db401ef

  • SHA512

    64ee1045bfe3ced7e90baf22058dcd3b567323e413b2ba607aed20904e285fc977d63520f6fad86d51c7a855579585d750e932d479b23712729e24caaf0a4d3c

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://sempersim.su/gm11/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 2020-68-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections