General
-
Target
4676-133-0x00000000022B0000-0x00000000022CB000-memory.dmp
-
Size
108KB
-
MD5
262a3c16064d8a03b04aaf49a479408a
-
SHA1
b23f15f4cfd129d9b24ecaaf14be9a9b42b15c77
-
SHA256
ab858aae66e724f20ce78db2ddef202dc6e7de268d965cea4427f19f2e74bf7f
-
SHA512
5ee3a070740c7dee9492db06f18fadbeffe890c2fbdff2bfe999c8a2ae4a960a71327f0350cfe1d3345ee3ef51ba9cb21ad60c85c78eee0d1786543b9e0474fe
-
SSDEEP
1536:wlHD3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:UDMSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
https://sempersim.su/ha19/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
Files
-
4676-133-0x00000000022B0000-0x00000000022CB000-memory.dmp