Overview

overview

10

Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    368-67-0x00000000004139DE-mapping.dmp

  • Size

    752KB

  • MD5

    d49fca6c55d357e8b5ebd31aa703677a

  • SHA1

    23a5a76e14853180ae065228d9dab97b576d7612

  • SHA256

    dae87036d9355e2b1865864b4dc06c43fcd87e1d2b732c483c73f260a2e95a28

  • SHA512

    da5a167614d317c2c92b67399570e222a49cbe31bc66b93c85fd4fb64a3dd47e9019f78306a0b382d6ae330b211f2182b69f5137e73ae4951b9eb2c0036aa6a0

  • SSDEEP

    3072:oSHIG6mQwGmfOQd8YhY0/EqUGmSHIG6mQwGmfOQd8YhY0/ENUGL:ocd6bUfFdXThUDcd6bUfFdXT6Ue

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

https://efvsx.tk/PWS/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 368-67-0x00000000004139DE-mapping.dmp