Overview

overview

10

Static

static

10

520-67-0x0...ry.exe

windows7-x64

1

520-67-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    520-67-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    bf9fa48c2d3d7620e324195619aa7eae

  • SHA1

    0375e95062705b14895af845e17265d125d376c3

  • SHA256

    0435e5ea2dfee3c7f5293a86c94acea656c13bd4c9da9d3e635032123cdbd96f

  • SHA512

    1fb671384fda2e571d0595c3a4bac1c6d5e9654154c36e8467ab9ca12b67d6713b24e85a4eb6d86e377ff4f3b5a658cb3beb835fa062d1fe8397e4978eacb0cf

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://104.156.227.195/~blog/?p=70927

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 520-67-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections