Overview

overview

10

Static

static

10

948-68-0x0...ry.exe

windows7-x64

1

948-68-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    948-68-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    5c9e4a0cf03a759f4a65dde90c5f2715

  • SHA1

    85d603b2defbc6f25dda961432f2f346c8e4dcee

  • SHA256

    32ba5a07461e94ae5bfe77bb4246ce6855b14fec601525a951b431a1eb63e1f6

  • SHA512

    46b0e0e0f6ce1913e48d681a40eb12e19864dee34bffc1472b17b2e64aa13680d9f5108f2f47a5f2095170b13a50cb5ada677139f12c38d460664dab704c7428

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://tompsup.me/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 948-68-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections