Overview

overview

10

Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1764-134-0x00000000047A0000-0x00000000047BB000-memory.dmp

  • Size

    108KB

  • MD5

    e03d653750d35e1108f79aa565676ddf

  • SHA1

    cc4068d4e007e1a545d3ed8d631029f123bd2246

  • SHA256

    8cac9babb96333e6528b10d5345bac41774cc298dbe132114a242dfda4c01061

  • SHA512

    17b8447650ddcac2ca04e583b50beae6a3b4f1f29811c6473cf8952224d3af79b2eee1da55bab1ebb626703526688bf36e2362ddd3494d4b7218295025a2963e

  • SSDEEP

    1536:wlED3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:XDMSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://208.67.105.148/ok/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1764-134-0x00000000047A0000-0x00000000047BB000-memory.dmp