Overview

overview

10

Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1916-83-0x00000000004139DE-mapping.dmp

  • Size

    752KB

  • MD5

    8c3ab5af52bb50d6c6e8a420b339a538

  • SHA1

    ce93dad957bc00d4aae0bc55acddd5e9f30c39a3

  • SHA256

    d7e4fa1f8e0c4bac4a03d667d6ab424528582d4f1d05090deace5d24fdcb9230

  • SHA512

    115ad5d9b10a4f0f8153c52ec600272ce397f04c3efe972bfb96039c3e2387a10b651609f544c4cfcdecd875693c49c89313d4a290e917d7f2142ee66359066e

  • SSDEEP

    3072:oSHIG6mQwGmfOQd8YhY0/EqUGnSHIG6mQwGmfOQd8YhY0/ENUG6:ocd6bUfFdXThU2cd6bUfFdXT6Uj

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://171.22.30.147/cody/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1916-83-0x00000000004139DE-mapping.dmp