Overview

overview

10

Static

static

10

528-77-0x0...ry.exe

windows7-x64

1

528-77-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    528-77-0x0000000000400000-0x00000000004EE000-memory.dmp

  • Size

    952KB

  • MD5

    ef0ee56aa8b13cd21254c0dc5a229d31

  • SHA1

    f808d4ea76191e88ba693eb847ca74a31433def1

  • SHA256

    224a33fd2606a5a6ed91e88a927e96a7ab7b65c4e57ad1ad9acadf2ce9403cbf

  • SHA512

    7075eec3f80a0d98bf21471b92ee53ae525af50fcbb3e9e24d1823c105ee7aa25e73f23627e8ffe5001e3a205edbca946405777dfdc5c1c535cb83183451ca0e

  • SSDEEP

    3072:nSHIG6mQwGmfOQd8YhY0/EwUGExbegc8NLbOVwLnpFKKYxDj9Ji8NXVwLnpFKKYU:ncd6bUfFdXT/UlRe8N3O9d9VwmXC

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

https://stardoors.com.br/site/wp-includes/fonts/ff/panel/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 528-77-0x0000000000400000-0x00000000004EE000-memory.dmp
    .exe windows x86


    Headers

    Sections