Overview

overview

10

Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2028-56-0x0000000000020000-0x000000000003B000-memory.dmp

  • Size

    108KB

  • MD5

    9052f8878cc5dacc5f08a63fdc9b4834

  • SHA1

    603a5e471177d222ba40c7f731f0c2d84d23117e

  • SHA256

    1e145ae9e4242b3491aead99c787afcb087ddf622a9f1d18da7b6f349934b6f4

  • SHA512

    4532a69d3f6f7ee5fda6be745887e64ffef05a06d896701bef2a731d9446ae95a590b1a5ad1f21250161102d9cdcf9ff28876432053205cf22f4370c1706c015

  • SSDEEP

    1536:wlND3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:uDMSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://171.22.30.164/mous/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 2028-56-0x0000000000020000-0x000000000003B000-memory.dmp