General
-
Target
1812-78-0x0000000000400000-0x0000000000615000-memory.dmp
-
Size
2.1MB
-
MD5
4dffc3a76f1bd901156499b6895c3ad9
-
SHA1
ccee71387d94bfeed6e864cab266ba8750f6045c
-
SHA256
7ae475f1c4c8358a8dc78628570188a2a8740c3df548ce03b89ff62440a51cda
-
SHA512
986b802414fb2e286cf5ce9d575d1a0454eaa462b8aa3908c5258ef0a66d021bc7ac638e053d6c010087ead63f2f518a0fcc4dff4792aa4d52736efec70ec071
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqqIzmd:nSHIG6mQwGmfOQd8YhY0/EXUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://104.156.227.195/~blog/?p=2123672169
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1812-78-0x0000000000400000-0x0000000000615000-memory.dmp
Headers
Sections