General
-
Target
1112-73-0x00000000001B0000-0x00000000001CB000-memory.dmp
-
Size
108KB
-
MD5
df5fa1b5a9c55f76a8dad160af6aed0e
-
SHA1
8bca1fe4aebdb0df420351ea173bd0f3561c9ff2
-
SHA256
9a72d6f127d7e583207d2d93b7f54f8980cd61b816ef8eb84b9e5d17590f42e3
-
SHA512
d40a3dc25db89babdeeed9f67a88f466cee1473401ba2ddee5ecb6fb3604c03ef8e41c5b8c9a46b676c98312790d0a74d846f7d24bdbbad073cd25e2373540f6
-
SSDEEP
1536:wl8D3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:7DMSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://171.22.30.164/mancho/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
Files
-
1112-73-0x00000000001B0000-0x00000000001CB000-memory.dmp