Overview

overview

10

Static

static

10

1240-67-0x...ry.exe

windows7-x64

1

1240-67-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1240-67-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    2eeee59ef03c20a58d0b3f9a2184b69d

  • SHA1

    4c8473033f1bf917254109097c75b1f720f0e23e

  • SHA256

    335ffd1fe965cff6b5fcc0428976917c85ba8661c84588375627fb1df14896e8

  • SHA512

    2246f30b69f4001e09f8ef59af48d928e34db5a7918d69f8822c6c8d8d3e61fb8fd57069cda28945b5a0e6d75ac47bdf5e750b5f541bf32d5550f247d7fbfe09

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://208.67.105.148/kffy/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1240-67-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections