General
-
Target
1200-71-0x00000000002B0000-0x00000000002CB000-memory.dmp
-
Size
108KB
-
MD5
9efdf2f3cda0072bbf631ab1b05a11aa
-
SHA1
5afdb236bd6725b4a7b3b9ce0917ec6848fb5eae
-
SHA256
fbd1795a1a60274eea2ddee53f48e87376908170422194892f45056976a53255
-
SHA512
286aba363624deaaf181854806b021f976cf3ba96b55625429ef4aff8e942d855b48ca1dcce570907e70a34fe279fd7c52242b6ccdb9a14d968cd3c72735aea4
-
SSDEEP
1536:wlBD3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:KDMSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://208.67.105.148/mous/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
Files
-
1200-71-0x00000000002B0000-0x00000000002CB000-memory.dmp