General
-
Target
1692-66-0x0000000000220000-0x000000000023B000-memory.dmp
-
Size
108KB
-
MD5
e0d7e3523cc445805f0dcdd5fe393d1b
-
SHA1
5dc1082f4d647e7a48c7088bdb76d2343252d31f
-
SHA256
599330d26158a22c7bd0242a0b740dbdde4107d4d5d5d059c2ff34871166d8dd
-
SHA512
b9061c3bb963a16a8a406cc72f5ac55783e6e8cbfcd5e3a09f30e3c0a0915d9e65fa045293525f632f3c295f59f1aa3359deabb8a48eba9a71eb0ec1d9810d67
-
SSDEEP
1536:wlwD3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:7DMSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://171.22.30.164/mous/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
Files
-
1692-66-0x0000000000220000-0x000000000023B000-memory.dmp