General
-
Target
836-55-0x0000000000220000-0x000000000023B000-memory.dmp
-
Size
108KB
-
MD5
d3d7cc9c7fa36555b6f507c0c0663244
-
SHA1
085647d6aa8254268410d50d41874edf7db62049
-
SHA256
c6a55dca15264730c9fd9ac6e64ed43c8da5ce9ed38c064ca8db4ab8f9f8319f
-
SHA512
81d444fc8e06b37fc380de1c6521efc4101325efcbbae48363cb1a5d63a4dd0e8a51873e26ffe8aa5d414be32dee50f8c9b4bb5e429ca79be05e1982903bbcc0
-
SSDEEP
1536:wl+D3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:dDMSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://171.22.30.164/china/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
Files
-
836-55-0x0000000000220000-0x000000000023B000-memory.dmp