General
-
Target
752-83-0x0000000000220000-0x000000000023B000-memory.dmp
-
Size
108KB
-
MD5
e9ef6e9161a8239cfdc0f7f107354236
-
SHA1
1928dac8363e8274330a98acfb3ef3fd5982f331
-
SHA256
d4a7f98da30bfc9184ddc220f7e69190ab6bd61dc75933597c2a436d8da36bf0
-
SHA512
b8f778ef327babe776e8c879159cb7ec20a2d6167e5f776742b59ce72225ec175cfa3b5c7be2e840aa39d46946c7d73d69566dc561958742c3c7bb64c4d57b5b
-
SSDEEP
1536:wlVD3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:mDMSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://208.67.105.148/ok/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
Files
-
752-83-0x0000000000220000-0x000000000023B000-memory.dmp