Overview

overview

10

Static

static

10

1864-67-0x...ry.exe

windows7-x64

1

1864-67-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    1864-67-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    89560ebd017bb71b06e5ac0506229dad

  • SHA1

    8589670a687aa13a2ac3280c2fded9114302b6c8

  • SHA256

    1a6689992e549f5dcafa1244c536f5bf1ce4c5c3ebf8044afcf6c4b22bd66490

  • SHA512

    32ec413d2bfe209f3fad69d1887850a0a8538ca1792285f18d9aac1450cb5c0fa19e7b478283b53e317f5ef28a2ea2f4dc0720efa0ff1912d87a61a0d0b1265c

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqAIzmd:nSHIG6mQwGmfOQd8YhY0/ElUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

https://asbogadajuli.tk/Eze/PWS/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1864-67-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections