Overview

overview

10

Static

static

10

2736-139-0...ry.exe

windows7-x64

1

2736-139-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2736-139-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    de888fa6ffa3ab71dd4f655a40b19194

  • SHA1

    285522ed241be72cac4a47372ae78cf2bfd7ec99

  • SHA256

    9f872f14d57e1bdab8488cdd4c45c13b47325934db0a38d8c80dc25e1732be3a

  • SHA512

    9f2e1a63f3104aabaf7bc1ca479ae3deea3bc3353977b854cacc914708ed9ba26b36379aba374bed1c1d50399a807445ab629a5263263a5991d21062f03b73a5

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqRIzmd:nSHIG6mQwGmfOQd8YhY0/EIUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://171.22.30.147/kelly/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 2736-139-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections