Overview

overview

10

Static

static

10

432-67-0x0...ry.exe

windows7-x64

1

432-67-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    432-67-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    3f9e80147233c02bf9d24bfb53c6fe84

  • SHA1

    ec81ccb7ff0d38bf1d1fab0c63fede27bef841c5

  • SHA256

    8921cdfc96e1e6a282d2763e51b132bc21049c5a9f3080c50026e800077c3a95

  • SHA512

    ab62d3fe2beaf89a10212cc89b5118460d5ce6618e72d8512c17c5b22b4f178170fc9c295c818c4d30d72bca8ca0dde8a70a1f66a2c0a459e78405d34fdb3a69

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://185.246.220.60/mrp/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 432-67-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections