Overview

overview

10

Static

static

10

3016-199-0...ry.exe

windows7-x64

1

3016-199-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3016-199-0x0000000000400000-0x000000000062B000-memory.dmp

  • Size

    2.2MB

  • MD5

    0794b3e8ae1f7187a46b927acc2b25e8

  • SHA1

    1a7fd96b49c89f35dbff91108ececcca0767c8ae

  • SHA256

    2dfef6e24561fa333fbe0b91c9859c0509c66547f5ab240f8bff9e1d3ad04161

  • SHA512

    a688610df6c75e867a55c3fff3532a91039f9bb3dd3ff480a6a3f574ea0ad3c85f2335b5819119928b7c1b19e1409879b64fb2c2b4c260a8841665b582c0bd39

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqoIzmd:nSHIG6mQwGmfOQd8YhY0/EtUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://171.22.30.147/seth2/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 3016-199-0x0000000000400000-0x000000000062B000-memory.dmp
    .exe windows x86


    Headers

    Sections