General

  • Target

    1292-56-0x0000000000220000-0x000000000023B000-memory.dmp

  • Size

    108KB

  • MD5

    fd089c236996581ab039cd9787974875

  • SHA1

    1f349f7c27a5f89911810bac7a28dcb033753824

  • SHA256

    fa97c98df600b74d62df6eece525538b24648cfd85164914007e073ad076d180

  • SHA512

    801074afb527172ffaff9be40defdc46a039a4b23a26098d9a2bf07d59cbe2cf772b45e9e61551e1c007e6b8717772f39cec0c01ffd9c9572abb52657b982943

  • SSDEEP

    1536:wldD3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:KDMSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

https://sempersim.su/ha19/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1292-56-0x0000000000220000-0x000000000023B000-memory.dmp