General

  • Target

    1704-60-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    09b981986a10bcbf3a5cb72e94ffcd45

  • SHA1

    c2de8fbf254106b416e6d7e5920a552f51de2620

  • SHA256

    8fa2ad26f26e6b4a4ebf0f56d7394858165e98576b44ddb974384916c4b6c461

  • SHA512

    ba4bbd5c8fc83de75a593a8dbd3e3ae30b9873ebc39fd52712140ae5b29b255acdca9cc40d84492a36ef76f805913216f52a95574e894498e82fb83a0843efa9

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqTIzmd:nSHIG6mQwGmfOQd8YhY0/EeUG

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://maylnk.gq/P1/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1704-60-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections