General

  • Target

    836-55-0x0000000000220000-0x000000000023B000-memory.dmp

  • Size

    108KB

  • MD5

    d3d7cc9c7fa36555b6f507c0c0663244

  • SHA1

    085647d6aa8254268410d50d41874edf7db62049

  • SHA256

    c6a55dca15264730c9fd9ac6e64ed43c8da5ce9ed38c064ca8db4ab8f9f8319f

  • SHA512

    81d444fc8e06b37fc380de1c6521efc4101325efcbbae48363cb1a5d63a4dd0e8a51873e26ffe8aa5d414be32dee50f8c9b4bb5e429ca79be05e1982903bbcc0

  • SSDEEP

    1536:wl+D3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:dDMSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://171.22.30.164/china/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 836-55-0x0000000000220000-0x000000000023B000-memory.dmp