Overview

overview

10

Static

static

10

1580-66-0x...ry.exe

windows7-x64

1

1580-66-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1580-66-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    2aa750024c665159c0643c34986af491

  • SHA1

    d7e93999195f0c2ebc6ca5ed30ba6913921f613d

  • SHA256

    f19b37a0b9f1bcd0be91ebf40321dd3eb257d7375bf1031b49017a57d09a6ffd

  • SHA512

    4b95ff9521d3b69691711fa6fb0d9794b707dd69c0e834d0fe5fe1b115a845cfb341ea9adf62d2777275ff36815fa672d2de4f640b0634dbda20bb3ec0ef59b3

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq7Izmd:nSHIG6mQwGmfOQd8YhY0/E+UG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

https://sempersim.su/ha12/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1580-66-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections