Overview

overview

10

Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    940-71-0x0000000000220000-0x000000000023B000-memory.dmp

  • Size

    108KB

  • MD5

    5ea47f1ac98e7f206d3a59207cb64b7f

  • SHA1

    eaeb7229749b30f2b96145bb3467cb0755993b29

  • SHA256

    fd759a8a543754f8b9c101bc23fd9bc4c9038e25ae7b040b95b4b37b0855d23f

  • SHA512

    afe70b50980328df54ec5cc4e25bb401c775f57c759c37d2d70e90c75c9c18adfeefb34d7efb2801ef97b511d52823d5b6b904596a924e2f4c48117b4510e525

  • SSDEEP

    1536:wl0D3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:DDMSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://171.22.30.164/china/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 940-71-0x0000000000220000-0x000000000023B000-memory.dmp