Overview

overview

10

Static

static

10

320-67-0x0...ry.exe

windows7-x64

1

320-67-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    320-67-0x0000000000400000-0x00000000004A2000-memory.dmp

  • Size

    648KB

  • MD5

    c4c031a541efad9290ab32c0c7ee5db4

  • SHA1

    42cdbea8c28bbab6ccf8e4e87a6d3041d1130cf2

  • SHA256

    eabdae9e7cdf41d9335497ccbebc09baffaba82c5651fde31e58eb4a1be4f772

  • SHA512

    b519c257f37be1a67e468a65c060a3b2ade8e7ab1f168f2f705c2e3f3dde980d94fde578df1bd42c2b15aca7babd89735d418d9177414c705fac2e105e152c3f

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://104.156.227.195/~blog/?p=78405647195

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 320-67-0x0000000000400000-0x00000000004A2000-memory.dmp
    .exe windows x86


    Headers

    Sections