General
-
Target
1292-56-0x0000000000220000-0x000000000023B000-memory.dmp
-
Size
108KB
-
MD5
fd089c236996581ab039cd9787974875
-
SHA1
1f349f7c27a5f89911810bac7a28dcb033753824
-
SHA256
fa97c98df600b74d62df6eece525538b24648cfd85164914007e073ad076d180
-
SHA512
801074afb527172ffaff9be40defdc46a039a4b23a26098d9a2bf07d59cbe2cf772b45e9e61551e1c007e6b8717772f39cec0c01ffd9c9572abb52657b982943
-
SSDEEP
1536:wldD3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:KDMSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
https://sempersim.su/ha19/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
Files
-
1292-56-0x0000000000220000-0x000000000023B000-memory.dmp