Overview

overview

10

Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1496-55-0x0000000000220000-0x000000000023B000-memory.dmp

  • Size

    108KB

  • MD5

    40a4cc39ca85b5203b73c204bcdbde7f

  • SHA1

    dcc8f895d6aef6d15851aa1f1f9350d7982171c4

  • SHA256

    e1b79e427fc43f5b1f8af75fb168b3bba8d041dff5c313410fec84d1f284e173

  • SHA512

    e9eafa0ee6c6e442b4c26442e74a826f71f849902bfd09944e8790401da0b454f5298d58756f91a6254d190995df6d750f4a478bc486d6b894f495c81a9d3938

  • SSDEEP

    1536:wlrD3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:MDMSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://171.22.30.164/fresh1/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1496-55-0x0000000000220000-0x000000000023B000-memory.dmp